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Document Conventions 


KEY TERMS 

Bold type indicates text that must be typed 
exactly as shown. This includes assembly- 
language instructions, directives, symbols, and 
operators, as well as keywords in other 
languages. 

placeholders 

Italics indicate variable information supplied 
by the user. 

Examples 

This typeface indicates example programs, 
user input, and screen output. 

[optional items J 

Double brackets indicate that the enclosed item 
is optional. 

{choice 1 1 choice2 } 

Braces and a vertical bar indicate a choice 
between two or more items. You must choose 
one of the items unless double square brackets 
surround the braces. 

Repeating 

elements... 

Three dots following an item indicate that 
more items having the same form may be 
typed. 

SHIFT+Fl 

Small capital letters indicate key names. 
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Tools 


BIND 

Command-Line Syntax 
Options 

Environment Variables 
CodeView 

Command-Line Syntax 
Options 

Environment Variables 
CVPACK 

Command-Line Syntax 
Options 

EXEHDR 

Command-Line Syntax 
Options 

EXP 

Command-Line Syntax 
Options 

HELPMAKE 

Command-Line Syntax 
Options 

H2INC 

Command-Line Syntax 
Options 

Environment Variables 
IMPLIB 

Command-Line Syntax 
Options 

LIB 

Command-Line Syntax 

Options 

Commands 


LINK 

Command-Line Syntax 
Options 

Environment Variables 
MASM 

Command-Line Syntax 
Options 

Environment Variables 
ML 

Command-Line Syntax 
Options 

QuickAssembler Support 
Environment Variables 

NMAKE 

Command-Line Syntax 
Options 

Environment Variable 

PWB 

Command-Line Syntax 
Options 

Environment Variables 

PWBRMAKE 

Command-Line Syntax 
Options 

QuickHelp 

Command-Line Syntax 
Options 

Environment Variables 
RM 

Command-Line Syntax 
Options 

UNDEL 

Command-Line Syntax 
Options 



BIND 

The BIND utility converts an OS/2 program to run under both DOS 
and OS/2. 

Command-Line Syntax 

BIND infile \libraries\\options\ 


Options 

Option 

Action 

/HELP 

Option name: /HELP. Calls QuickHelp for help on 
BIND. 

/MAP \mapfile} 

Option name: /M[AP]. Generates a map of the DOS 
part of the executable file. 


/NAMES functions Option name: /NIAMESJ. Specifies functions 
/NAMES @filename supported under OS/2 only. Use with a list of 


/NOLOGO 

functions separated by spaces or a file specification 
preceded by @. 

Option name: /NOLOGO. Suppresses the BIND 
copyright message. 

/O outfile 

Option name: /OJUTFILE]]. Specifies the name for 
the bound application. 

/? 

Option name: /?. Displays a brief summary of BIND 
command-line syntax. 


Environment Variables 
Variable_Description 


LIB 

LINK 

Specifies search path for library files. 

Specifies default command-line options for the 
linker. 

TMPf 

Specifies path for the VM.TMP file. 


Microsoft® CodeView® Debugger 

The Microsoft® CodeView® debugger runs the assembled or compiled 
program while simultaneously displaying the program source code, 
program variables, memory locations, processor registers, and other 
pertinent information. 
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Command-Line Syntax 

CV I options 1 executablefile ^arguments} 
CVP | options} executablefile \argumenls\ 


Options 

Option 

Action 

/2 

/25 

/43 

/50 

/B 

/Ccommands 

/Dlbuffersizej 

/E 

/F 

Permits the use of two monitors. 

Starts in 25-line mode. 

Starts in 43-line mode. 

Starts in 50-line mode. 

Starts in black-and-white mode. 

Executes commands on start-up. 

Enables disk overlays (CV only). 

Enables use of expanded memory (CV only). 
Exchanges screens by flipping between video pages 
(CV only). 

/G 

Eliminates refresh snow on CGA monitors 
(CV only). 

/HO 1 1] 

Turns nonmaskable-interrupt and 8259-interrupt 
trapping on (/II) or off (/IO) (CV only). 

/K 

Disables installation of keyboard monitors for the 
program being debugged. 

/Ldll 

Loads symbolic information for the specified 
dynamic-link library (CVP only). 

/M 

Disables CodeView use of the mouse (use this 
option when debugging an application that 
supports the mouse). 

/NflO 1 11 

/NO tells CodeView to trap nonmaskable interrupts; 
/N1 tells it not to trap (CV only). 

/o 

Enables debugging of multiple processes 
(CVP only). 

/R 

/S 

Enables 80386/486 debug registers (CV only). 
Exchanges screens by changing buffers (primarily 
for use with graphics programs) (CV only). 

/TSF 

Toggles TOOLS.INI entry to read/not read the 
CURRENT.STS file. 

/X 

Enables use of extended memory (CV only). 
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Environment Variables 


Variable 

Description 

HELPFILES 

Specifies path of help files or list of help 
filenames. 

INTT 

Specifies path for TOOLS.INI and CURRENT.STS 
files. 


CVPACK 

The CVPACK utility reduces the size of an executable file that 
contains CodeView debugging information. 

Command-Line Syntax 

CVPACK loptionsl exefile 


Options 

Option 

Action 

/HELP 

/P 

/? 

Calls QuickHelp for help on CVPACK. 

Packs the file to the smallest possible size. 

Displays a brief summary of CVPACK command¬ 
line syntax. 


EXEHDR 

The EXEHDR utility displays and modifies the contents of an 
executable-file header. 

Command-Line Syntax 

EXEHDR loptionsj filenames 


Options 

Option 

Action 

/UEAP:number 

Option name: /HEAJP]. Sets the heap allocation 
field to number bytes for segmented executable 
files. 

/HELP 

Option name: /HELJP]. Calls QuickHelp for help on 
EXEHDR. 

/MAX:number 

Option name: /MA|X]]. Sets the maximum memory 
allocation to number paragraphs for DOS executable 
files. 
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/MIN ‘.number 

Option name: /MI[NJ. Sets the minimum memory 
allocation to number paragraphs for DOS executable 
files. 

/NEW 

Option name: /NE[WFILESJ. Enables support for 
HPFS. 

/NOLOGO 

Option name: /NOJLOGO]]. Suppresses the EXEHDR 
copyright message. 

/PM: type 

Option name: /PJMTYPE]. Sets the application type 
for OS/2 or Microsoft Windows™, where type is 
one of the following: PM (or WINDOWAPI), 

VIO (or WINDOWCOMPAT), or NOVIO 
(or NOTWINDOWCOMPAT). 

/RESET 

Option name: /RJESETERRORJ. Clears the error bit 
in the header of an OS/2 or Windows executable 
file. 

/STACK -.number 

Option name: /S[TACK]|. Sets the stack allocation 
to number bytes. 

/V 

Option name: /VERBOSE], Provides more 
information about segmented executable files, 
including the default flags in the segment table, all 
run-time relocations, and additional fields from the 
header. 

/? 

Option name: /?. Displays a brief summary of 
EXEHDR command-line syntax. 


EXP 

The EXP utility deletes all files in the hidden DELETED subdirectory 
of the current or specified directory. EXP is used along with RM and 
UNDEL to manage backup files. 

Command-Line Syntax 

EXP \options\ I directories fl 


Options 

Option 

Action 

/HELP 

/Q 

/R 

Calls QuickHelp for help on EXP. 

Suppresses display of deleted files. 

Recurses into subdirectories of the current or 
specified directory. 

/? 

Displays a brief summary of EXP command-line 
syntax. 
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HELPMAKE 

The HELPMAKE utility creates help files and customizes the help 
files supplied with Microsoft language products. 

Command-Line Syntax 

HELPMAKE (/EM I /Did 1 /H I /?} ^options} sourcefiles 


Options 

Option 

Action 

/Ac 

Specifies c as an application-specific control 
character for the help database, marking a line that 
contains special information for internal use by the 
application. 

/c 

Indicates that the context strings are case sensitive 
so that at run time all searches for help topics will 
be case sensitive. 

/D 

/DS 

Fully decodes the help database. 

Splits the concatenated, compressed help database 
into its components, using their original names. 

No decompression occurs. 

/DU 

Decompresses the database and removes all screen 
formatting and cross-references. 

/EM 

Creates (“encodes”) a help database from a specified 
text file (or files). The optional n indicates the 
amount of compression to take place. The value of 
n can range from 0 to 15. 

/HJELPJ 

Calls the QuickHelp utility. If HELPMAKE cannot 
find QuickHelp or the help file, it displays a brief 
summary of HELPMAKE command-line syntax. 

/K filename 

Specifies a file containing word-separator 
characters. This file must contain a single line of 
characters that separate words. ASCII characters 
from 0 to 32 (including the space) and character 

127 are always separators. If the /K option is not 
specified, the following characters are also 
considered separators: 

!"#&'()*+-,/:;<=>?@[\] A _'(\}~ 

IL 

Locks the generated file so that it cannot be 
decoded by HELPMAKE at a later time. 

/NOLOGO 

/Ooutfile 

Suppresses the HELPMAKE copyright message. 
Specifies outfile as the name of the help database. 
The name outfile is optional with the /D option. 
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/S n 


/T 


/VI«| 


/W width 


/? 


Specifies the type of input file, according to the 
following n values: 

/S1 Rich Text Format 

/S2 QuickHelp Format 

/S3 Minimally Formatted ASCII 

During encoding, translates dot commands to 
application-specific commands. During decoding, 
translates application commands to dot commands. 
The /T option forces /A:. 

Sets the verbosity of the diagnostic and 
informational output, depending on the value of n. 
The value of n can range from 0 to 6. 

Sets the fixed width of the resulting help text in 
number of characters. The value of width can range 
from 11 to 255. 

Displays a brief summary of HELPMAKE command¬ 
line syntax. 


H2INC 

The H2INC utility converts C header (.H) files into MASM- 
compatible include (.INC) files. It translates declarations and 
prototypes, but does not translate code. 

Command-Line Syntax 

H2INC \options\ filename.H 


Options 

Option_Action 


/C 

/Fa \filename\ 
/Fc ^filename} 


/HELP 

/Ht 

/Mn 

/Ni 

/Zn string 


Passes comments in the .H file to the .INC file. 
Specifies that the output file contain only 
equivalent MASM statements. This is the default. 
Specifies that the output file contain equivalent 
MASM statements plus original C statements 
converted to comment lines. 

Calls QuickHelp for help on H2INC. 

Enables generation of text equates. By default, text 
items are not translated. 

Instructs H2INC to explicitly declare the distances 
for all pointers and functions. 

Suppresses the expansion of nested include files. 
Adds string to all names generated by H2INC. Used 
to eliminate name conflicts with other H2INC- 
generated include files. 
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/Zu 

/? 


Makes all structure and union tag names unique. 
Displays a brief summary of H2INC command-line 
syntax. 


Note: H2INC also supports the following options from Microsoft C, 
version 6.0: /AC, /AH, /AL, /AM, /AS, /AT, /D, /F, /Fi, /GO, /Gl, 
/G2, /G3, /G4, /Gc, /Gd, /Gr, /I, /J, /Tc, /U, /u, /WO, AVI, /W2, /W3, 
/W4, /X, /Za, /Zc, /Ze, /Zpl, /Zp2, /Zp4. 

Environment Variables 

Variable_Description 


CL 

H2INC 

Specifies default command-line options. 

Specifies default command-line options. Appended 
after the CL environment variable. 

INCLUDE 

Specifies search path for include files. 


IMPLIB 

The IMPLIB utility creates import libraries used by LINK to link 
dynamic-link libraries with applications. 

Command-Line Syntax 

IMPLIB {options} implibname { dllfile... \deffile...) 


Options 

Option 

Action 

/HELP 

Option name: /HIELPJ. Calls QuickHelp for help on 
IMPLIB. 

/NOI 

Option name: /NOIJGNORECASE]]. Preserves case 
for entry names in DLLs. 

/NOLOGO 

Option name: /NOLIOGOJ. Suppresses the IMPLIB 
copyright message. 

/? 

Option name: /?. Displays a brief summary of 
IMPLIB command-line syntax. 
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LIB 

The LIB utility helps create, organize, and maintain run-time libraries. 
Command-Line Syntax 

LIB inlibrary \options} {commands} [, \listfile\ I, {out library} J J [;]] 


Options 

Option 

Action 

/HELP 

Option name: /HJELP]. Calls QuickHelp for help on 
LIB. 

/IGN 

Option name: /I[GNORECASEJ. Tells LIB to ignore 
case when comparing symbols (the default). Use to 
combine a library marked /NOI with an unmarked 
library to create a new case-insensitive library. 

/NOE 

Option name: NOEJXTDICTIONARYJ. Prevents LIB 
from creating an extended dictionary. 

/NOI 

Option name: /NOIJGNORECASE], Tells LIB to 
preserve case when comparing symbols. When 
combining libraries, if any library is marked /NOI, 
the output library is case sensitive, unless /IGN is 
specified. 

/NOLOGO 

Option name: /NOLHOGOJ. Suppresses the LIB 
copyright message. 

/PAGE:«wwfar 

Option name: /PflAGESIZEJ. Specifies the page size 
(in bytes) of a new library or changes the page size 
of an existing library. The default for a new library 
is 16. 

/? 

Option name: /?. Displays a brief summary of LIB 
command-line syntax. 

Commands 


Operator 

Action 

+name 

-name 

-+name 

Appends an object file or library file. 

Deletes a module. 

Replaces a module by deleting it and appending an 
object file with the same name. 

*name 

-*name 

Copies a module to a new object file. 

Moves a module out of the library by copying it to 
a new object file and then deleting it. 
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LINK 

The LINK utility combines object files into a single executable file or 
dynamic-link library. 

Command-Line Syntax 

LINK objfiles [, \exefile\ [, \mapfile] [, {libraries] [, \deffile] ] J1 H;] 


Options 

Option 

Action 

/ALIGN -.size 

Option name: /ALIGNMENT]]. Directs LINK to 
align segment data in a segmented executable file 
along the boundaries specified by size bytes, where 
size must be a power of two. 

/BATCH 

Option name: /B[[ATCH1|. Suppresses prompts for 
library or object files not found. 

/CO 

Option name: /COIDEVIEWJ. Adds symbolic data 
and line numbers needed by the Microsoft CodeView 
debugger. This option is incompatible with the 
/EXEPACK option. 

/CPARM -.number 

Option name: /CP|ARMAXALLOCl. Sets the 
program's maximum memory allocation to number 
of 16-byte paragraphs. 

/DOSSEG 

Option name: /DO[SSEGJ. Orders segments in the 
default order used by Microsoft high-level 
languages. 

/DSALLOC 

Option name: /DSIALLOCATEJ. Directs LINK to 
load all data starting at the high end of the data 
segment. The /DSALLOC option is for assembly- 
language programs that create DOS .EXE files. 

/EXEPACK 

Option name: /EJXEPACKJ. Packs the executable 
file. The /EXEPACK option is incompatible with 
either /INCR or /CO. Do not use /EXEPACK on a 
Windows program. 

/FARCALL 

Option name: /F[ARCALLTRANSLATION]]. 

Optimizes far calls. The /FARCALL option is on 
automatically when using /TINY. Use the /PACKC 
option with /FARCALL when linking for OS/2; 
/PACKC is not recommended with /FARCALL when 
linking for Windows. 
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/HELP 

/HIGH 

/INCR 

/INFO 

/LINE 

/MAP 

/NODl.librarynamej 

/NOE 

/NOFARCALL 

/NOI 

/NOLOGO 

/NONULLS 

/NOPACKC 


Option name: /HEJLPJ. Calls QuickHelp for help on 
LINK. 

Option name: /HIJGHJ. Places the executable file as 
high in memory as possible. Use /HIGH with the 
/DSALLOC option. This option is for assembly- 
language programs that create DOS .EXE files. 
Option name: /INCflREMENTAL]]. Prepares for 
incremental linking with ILINK. This option is 
incompatible with /EXEPACK and /TINY. 

Option name: /INFORMATION]]. Displays to the 
standard output the phase of linking and names of 
object files being linked. 

Option name: /LI[NENUMBERS[. Adds source-file 
line numbers and associated addresses to the map 
file. The object file must be created with line 
numbers. This option creates a map file even if 
mapfile is not specified. 

Option name: /M|AP]]. Adds public symbols to the 
map file. 

Option name: /NODJEFAULTLIBRARYSEARCHJ. 
Ignores the specified default library. Specify 
without libraryname to ignore all default libraries. 
Option name: /NOEIXTDICTIONARYJ. Prevents 
LINK from searching extended dictionaries in 
libraries. Use /NOE when redefinition of a symbol 
causes error L2044. 

Option name: /NOFflARCALLTRANSLATION]]. Turns 
off far-call optimization. 

Option name: /NOIJGNORECASE]. Preserves case in 
identifiers. 

Option name: /NOLIOGOJ. Suppresses the LINK 
copyright message 

Option name: /NONIULLSDOSSEGJ. Orders 
segments as with the /DOSSEG option, but with no 
additional bytes at the beginning of the _TEXT 
segment (if defined). This option overrides 
/DOSSEG. 

Option name: /NOPIACKCODEJ. Turns off code 
segment packing. 
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/PACKQinumberl 

Option name: /PACKQODE], Packs neighboring 
code segments together. Specify number bytes to 
set the maximum size for physical segments formed 
by /PACKC. 

/PACKDJ -.number} 

Option name: /PACKDIATAJ. Packs neighboring 
data segments together. Specify number bytes to set 
the maximum size for physical segments formed by 
/PACKD. This option is for OS/2 and Windows 
only. 

/PAUSE 

Option name: /PAU[SEJ. Pauses during the link 
session for disk changes. 

/PM: type 

Option name: /PMUTYPEJ. Specifies the type of 
Windows or OS/2 application where type is one 
of the following: PM (or WINDOWAPI), 

VIO (or WINDOWCOMPAT), or NOVIO 
(or NOTWINDOWCOMPAT). 

/ST ACK:number 

Option name: /STJACKJ. Sets the stack size to 
number bytes, from 1 byte to 64K. 

/TINY 

Option name: /T[INY]|. Creates a tiny-model DOS 
program with a .COM extension instead of .EXE. 
Incompatible with /INCR. 

/? 

Option name: /?. Displays a brief summary of LINK 
command-line syntax. 


Note: Several rarely used options not listed above are described in 
online help. 

Environment Variables 
Variable_Description 


INIT 

LIB 

LINK 

TMP 

Specifies path for the TOOLS.INI file. 

Specifies search path for library files. 

Specifies default command-line options. 

Specifies path for the VM.TMP file. 
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MASM 

The MASM program converts command-line options from MASM 
style to ML style, adds options to maximize compatibility, and calls 
ML.EXE. 

Note: MASM.EXE is provided to maintain compatibility with old 
makefiles. For new makefiles, use the more powerful ML driver. 

Command-Line Syntax 

MASM \options\ sourcefile 1, \objectfile\ If mstingfilej 
I, \crossreferencefile\ 1111;1 


Options 

Option_Action 


/A Orders segments alphabetically. Results in a 

warning. Ignored. 

/B Sets internal buffer size. Ignored. 

/C Creates a cross-reference file. Translated to /FR. 

/D Creates a Pass 1 listing. Ignored. 

IDsymbol\=value\ Defines a symbol. Unchanged. 

/E Emulates floating-point instructions. Translated to 

/FPi. 

/H Lists command-line arguments. Translated to /help. 

/HELP Calls QuickHelp for help on the MASM driver. 

/I pathname Specifies an include path. Unchanged. 

/L Creates a normal listing. Translated to /FI. 

/LA Lists all. Translated to /FI and /Sa. 

/ML Treats names as case sensitive. Translated to /Cp. 

/MU Converts names to uppercase. Translated to /Cu. 

/MX Preserves case on nonlocal names. Translated to 

/Cx. 

/N Suppresses table in listing file. Translated to /Sn. 

/P Checks for impure code. Use OPTION 

READONLY. Ignored. 

/S Orders segments sequentially. Results in a warning. 

Ignored. 

/T Enables terse assembly. Translated to /nologo. 

/V Enables verbose assembly. Ignored. 

/WO Enables warning level 0. Unchanged. 

/W1 Enables warning level 1. Unchanged. 
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/W2 Enables warning level 2. Unchanged. 

/X Lists false conditionals. Translated to /Sx. 

[L Displays error lines on screen. Ignored. 

/ZD Generates line numbers for CodeView. Translated to 

/Zd. 

/ZI Generates symbols for CodeView. Translated to /Zi. 

Environment Variables 
Variable_Description 

INCLUDE Specifies default path for .INC files. 

MASM Specifies default command-line options. 

TMP Specifies path for temporary files. 

ML 

The ML program assembles and links one or more assembly-language 
source files. The command-line options are case sensitive. 

Command-Line Syntax 

ML ^options 1 filename [ \options\ filename}... [/link linkoptions 1 


Options 

Option_ Action 

/AT Enables tiny-memory-model support. Enables error 

messages for code constructs that violate the 
requirements for .COM format files. Note that this 
is not equivalent to the .MODEL TINY directive. 

/B\ filename Selects an alternate linker. 

/c Assembles only. Does not link. 

/Cp Preserves case of all user identifiers. 

/Cu Maps all identifiers to uppercase (default). 

/Cx Preserves case in public and extern symbols. 

IDsymbol\=value\ Defines a text macro with the given name. If value 

is missing, it is blank. Multiple tokens separated 
by spaces must be enclosed in quotation marks. 

/EP Generates a preprocessed source listing (sent to 

STDOUT). See /Sf. 
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/F hexnum 


/Fb filename J 
/Fe filename 
/FI filename 1 
/Fm filename^ 
/Fo filename 
/FPi 

/Fr filename} 
/FR H/i'/e/jawe’l 

/Gc 

/Gd 


/H number 
/help 

/I pathname 

/ nologo 
/Sa 
/Sf 
/Sg 

/SI wzdf/i 

/Sn 

/Sp length 

/Ss /?x/ 

/St text 
/Sx 

/T& filename 
/w 

Wlevel 


Sets stack size to hexnum bytes (this is the same as 
/link /STACK -.number). The value must be expressed 
in hexadecimal notation. There must be a space 
between /F and hexnum. 

Creates a bound executable file. 

Names the executable file. 

Generates an assembled code listing. See /Sf. 

Creates a linker map file. 

Names an object file. 

Generates emulator fixups for floating-point 
arithmetic (mixed-language only). 

Generates a source browser .SBR file. 

Generates an extended form of a source browser 
.SBR file. 

Specifies use of FORTRAN- or Pascal-style function 
calling and naming conventions. Same as OPTION 
LANGUAGE:PASCAL. 

Specifies use of C-style function calling and 
naming conventions. Same as OPTION 
LANGUAGES. 

Restricts external names to number significant 
characters. The default is 31 characters. 

Calls QuickHelp for help on ML. 

Sets path for include file. A maximum of 10 /I 
options is allowed. 

Suppresses messages for successful assembly. 

Turns on listing of all available information. 

Adds first-pass listing to listing file. 

Turns on listing of assembly-generated code. 

Sets the line width of source listing in characters 
per line. Range is 60 to 255 or 0. Default is 0. 

Same as PAGE , width. 

Turns off symbol table when producing a listing. 
Sets the page length of source listing in lines per 
page. Range is 10 to 255 or 0. Default is 0. Same 
as PAGE length. 

Specifies text for source listing. Same as 
SUBTITLE text. 

Specifies title for source listing. Same as 
TITLE text. 

Turns on false conditionals in listing. 

Assembles source file whose name does not end 
with the .ASM extension. 

Same as /W0. 

Sets the warning level: level 0. 1,2, or 3. 
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/WX Returns an error code if warnings are generated. 

/Zd Generates line-number information in object file. 

/Zf Makes all symbols public. 

/Zi Generates CodeView information in object file. 

/Zm Enables M510 option for maximum compatibility 

with MASM 5.1. 

/Zp \alignment\ Packs structures on the specified byte boundary. The 
alignment may be 1,2, or 4. 

/Zs Performs a syntax check only. 

/? Displays a brief summary of ML command-line 

syntax. 

QuickAssembler Support 

For compatibility with QuickAssembler makefiles, ML recognizes the 

following options: 

Option_Action 

/a Orders segments alphabetically. In MASM 6.0, the 

.ALPHA directive must be used. Ignored. 

/Cl Equivalent to /Cp. 

/Ez Prints the source for error lines to the screen. This 

option is no longer supported and is ignored by 
MASM 6.0. 

/PI Performs one-pass assembly. MASM 6.0 always 

performs a single pass through the source file. This 
option is ignored by MASM 6.0. 

/P2 Performs two-pass assembly. MASM 6.0 always 

performs a single pass through the source file. This 
option is ignored by MASM 6.0. 

/s Orders segments sequentially. In MASM 6.0, the 

.SEQ directive must be used. Ignored. 

/Sq Equivalent to /SI0 /SpO. 

Environment Variables 

Variable_Description 

INCLUDE Specifies search path for include files. 

ML Specifies default command-line options. 

TMP Specifies path for temporary files. 
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NMAKE 

The NMAKE utility automates the process of compiling and linking 
project files. 

Command-Line Syntax 

NMAKE \options\ ^macros} \targets\ 


Options 

Option 

Action 

/A 

Executes all commands even if targets are not out- 
of-date. 

/c 

Suppresses the NMAKE copyright message and 
prevents nonfatal error or warning messages from 
being displayed. 

/D 

Displays the modification time of each file when 
the times of targets and dependents are checked. 

/E 

Causes environment variables to override macro 
definitions within description files. 

/F filename 

Specifies filename as the name of the description 
file to use. If a dash (-) is entered instead of a 
filename, NMAKE reads the description file from 
the standard input device. 

If /F is not specified, NMAKE uses MAKEFILE as 
the description file. If MAKEFILE does not exist, 
NMAKE builds command-line targets using 
inference rules. 

/HELP 

/I 

Calls QuickHelp for help on NMAKE. 

Ignores exit codes from commands in the 
description file. NMAKE continues executing the 
rest of the description file despite the errors. 

/N 

Displays but does not execute commands from the 
description file. 

/NOLOGO 

Suppresses the NMAKE copyright message. 
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/P Displays all macro definitions, inference rules, 

target descriptions, and the .SUFFIXES list. 

/Q Checks modification times of command-line targets 

(or first target in the description file if no 
command-line targets are specified). NMAKE returns 
a zero exit code if all such targets are up-to-date and 
a nonzero exit code if any target is out-of-date. 

Only preprocessing commands in the description 
file are executed. 

/R Ignores inference rules and macros that are defined 

in the TOOLS.INI file or are predefined. 

/S Suppresses display of commands as they are 

executed. 

/T Changes modification times of command-line 

targets (or first target in the description file if no 
command-line targets are specified) to the current 
time. Only preprocessing commands in the 
description file are executed. The contents of target 
files are not modified. 

/X filename Sends all error output to filename, which can be 

either a file or a device. If a dash (-) is entered 
instead of a filename, the error output is sent to the 
standard output device. 

/Z Internal option for use by the Microsoft 

Programmer’s WorkBench (PWB). 

/? Displays a brief summary of NMAKE command-line 

syntax. 

Environment Variable 

Variable_Description 

INIT Specifies path for TOOLS.INI file, which may 

contain macros, inference rules, and description 
blocks. 
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PWB (Programmer's WorkBench) 

The Microsoft Programmer’s WorkBench (PWB) provides an integrated 
environment for developing programs in assembly language. The 
command-line options are case sensitive. 

Command-Line Syntax 

PWB {options^ H/iVes] 


Options 

O p t i o n_ Action 


/Dlwiif] 


/e cmdstr 


/m mark 


minit\ 


It 


Prevents PWB from examining initialization files, 
where init is one or more of the following 
characters: 

A Disable autoload extensions (including 

language-specific extensions and online 
help) 

S Ignore CURRENT.STS 

T Ignore TOOLS.INI 

If the /D option does not include an init character, 
it is equivalent to specifying /DAST (all files and 
extensions ignored). 

Executes the command or sequence of commands at 
start-up. The entire cmdstr argument must be placed 
in double quotation marks if it contains a space. If 
cmdstr contains literal double quotation marks, 
place a backslash (\) in front of each double 
quotation mark. To include a literal backslash in the 
command string, use double backslashes (\\). 

Moves the cursor to the specified mark instead of 
moving it to the last known position. The mark 
can be a line number. 

Specifies a program list for PWB to read, where init 
can be 

Ffile Read a foreign program list (one not 
created using PWB). 

L Read the last program list. Use this 

option to start PWB in the same state 
you left it. 

Pfile Read a PWB program list. 

Starts PWB in no-edit mode. Functions that modify 
files are disallowed. 
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I yt\file...\ 

Loads the specified file at start-up. The file 
specification can contain wildcards. If multiple files 
are specified, PWB loads only the first file. When 
the Exit function is invoked, PWB saves the current 
file and loads the next file in the list. Files 
specified with /t are temporary; PWB does not add 
them to the file history on the File menu. 

No other options can follow /t on the command 
line. Each temporary file must be specified in a 
separate /t option. 

/? 

Displays a brief summary of PWB command-line 
syntax. 


Environment Variables 

Variable_Description 


HELPFILES 

Specifies path of help files or list of help 
filenames. 

INIT 

Specifies path for TOOLS.INI and CURRENT.STS 
files. 

TMP 

Specifies path for temporary files. 


PWBRMAKE 

PWBRMAKE converts the .SBR files created by the assembler into 
database .BSC files that can be read by the Microsoft Programmer's 
WorkBench (PWB) Source Browser. The command-line options are 
case sensitive. 

Command-Line Syntax 

PWBRMAKE I options J sbrfiles 


Options 

Option 

Action 

/Ei filename 
/Ei (filename...) 

Excludes the contents of the specified include files 
from the database. To specify multiple filenames, 
separate them with spaces and enclose the list in 
parentheses. 

/Em 

Excludes symbols in the body of macros. Use /Em 
to include only macro names. 

/Es 

Excludes from the database every include file 
specified with an absolute pathname or found in an 
absolute path specified in the INCLUDE 
environment variable. 
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/HELP Calls QuickHelp for help on PWBRMAKE. 

/Iu Includes unreferenced symbols. 

/n Forces a nonincremental build and prevents 

truncation of .SBR files. 

/o filename Specifies a name for the database file. 

/v Displays verbose output. 

/? Displays a brief summary of PWBRMAKE 

command-line syntax. 


QuickHelp 

The QuickHelp utility displays online help files. All MASM reserved 
words and error messages can be used for topic. 

Command-Line Syntax 

QH {options} I topic ] 


Options 

Option_Action 


Id filename 

/\number 

/mnumber 

Ip filename 
/pa {filename} 

/q 

/r command 


Specifies either a specific database name or a path 
where the databases are found. 

Specifies the number of lines the QuickHelp window 
should occupy. 

Changes the screen mode to display the specified 
number of lines, where number is in the range 25 to 
60. 

Sets the name of the paste file. 

Specifies that pasting operations are appended to 
the current paste file (rather than overwriting the 
file). 

Prevents the version box from being displayed 
when QuickHelp is installed as a keyboard monitor. 
Specifies the command that QuickHelp should 
execute when the right mouse button is pressed. The 
command can be one of the following letters: 

1 Display last topic 

i Display history of help topics 

w Hide window 

b Display previous topic 
e Find next topic 

t Display contents 
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/s 

Specifies that clicking the mouse above or below 
the scroll box causes QuickHelp to scroll by lines 
rather than by pages. 

/sgnumber 

Specifies the number of screen groups that 

QuickHelp should monitor, where number is in the 
range 1 to 12. This option is valid only when 
QuickHelp is detached from an OS/2 protected-mode 
screen group. 

/t name 

Directs QuickHelp to copy the specified section of 
the given topic to the current paste file and exit. 

The name may be 

All Paste the entire topic 

Syntax Paste the syntax only 

Example Paste the example only 

If the topic is not found, QuickHelp returns an exit 
code of 1. 

/u 

Specifies that QuickHelp is being run by a utility. 

If the topic specified on the command line is not 
found, QuickHelp immediately exits with an exit 
code of 3. 


Environment Variables 

Variable_Description 


HELPFILES 

Specifies path of help files or list of help 
filenames. 

QH 

TMP 

Specifies default command-line options. 

Specifies directory of default paste file. 
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RM 

The RM utility moves a file to a hidden DELETED subdirectory of the 
directory containing the file. Use the UNDEL utility to recover the file 
and the EXP utility to expunge the hidden file. 

Command-Line Syntax 

RM \options\ \files\ 


Options 

Option 

Action 

/F 

/HELP 

/I 

/K 

/R directory 

Deletes read-only files without prompting. 

Calls QuickHelp for help on RM. 

Inquires for permission before removing each file. 
Keeps read-only files without prompting. 

Recurses into subdirectories of the specified 
directory. 

/? 

Displays a brief summary of RM command-line 
syntax. 


UNDEL 

The UNDEL utility moves a file from a hidden DELETED subdirectory 
to the parent directory. UNDEL is used along with EXP and RM to 
manage backup files. 

Command-Line Syntax 

UNDEL {{option I files)} 


Options 

Option 

Action 

/HELP 

/? 

Calls QuickHelp for help on UNDEL. 

Displays a brief summary of UNDEL command-line 
syntax. 
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Topical Cross-Reference for Directives 


Simplified 

Segment 

.MODEL 

• STARTUP 

• EXIT 
•CODE 
•STACK 

• DATA 

• DATA? 

• KARDATA 

• FARDATA? 
•CONST 

• DOSSEG 


Data Allocation 

BYTE/SBYTE 

WORD/SWORD 

DVVOR D/S DWORD 

FWORD 

QWORD 

TBYTE 

LABEL 

ALIGN 

EVEN 

ORG 

REAL4 

REAL8 

REAL10 


Segment 

SEGMENT 

ENDS 

GROUP 

ASSUME 

END 

.ALPHA 

•DOSSEG 

•SEQ 

Conditional 

Assembly 

IF 

IFE 

IFB/IFNB 

IFDEF/IFNDEF 

IFDIF/IFDIFI 

IFIDN/IFIDNI 

ELSE 

ENDIF 

Macros 

MACRO 

LOCAL 

PURGE 

GOTO 

ENDM 

EXITM 


Code_La,be.|s 

LABEL 

ALIGN 

EVEN 

ORG 

Scope 

PUBLIC 

EXTERNDEF 

EXTERN 

COMM 

INCLUDELIB 

Structure 
and Record 

RECORD 

STRUCT 

UNION 

ENDS 

TYPEDEF 

String 

CATSTR 

SIZESTR 

SUBSTR 

INSTR 


Equates 

EQU 

TEXTEQU 

.Rep e at... B . locks 

REPEAT 

WHILE 

FOR 

FORC 

ENDM 

GOTO 

Conditional 
Control Flow 

• IF 

•ELSE 

• ELSEIF 

• ENDIF 
•WHILE 
•ENDW 
•REPEAT 

• UNTIL/ 

• UNTILCXZ 

• BREAK 
•CONTINUE 

Listing Control 

TITLE 

SUBTITLE 

PAGE 

•LIST 

.NOLIST 

•LISTIF 

•NOLISTIF 

•TFCONI) 

• LISTMACROALL 

• NOLISTMACRO 
.1 IS I M ACRO 
•CREF 
•NOCRF.F 

• LISTALL 


Conditional Error 

ERR 

• ERRE 

• ERRNZ 

• ERRB 

• ERRNB 

• ERRDEF 
.ERRNDEF 

• ERRDIF .ERR 1)1 FI 

• ERRIDN/.ERRIDNI 

Processor 

.8086 .486 

.186 .486P 

.286 .8087 

• 286P .287 

.386 .387 

•386P .N087 

Procedures 

PROC 

ENDP 

PROTO 

INVOKE 

USES 

.M.isce.l.lanepjjs 

OPTION 

COMMENT 

ECHO 

• RADIX 
END 

PUSHCONTEXT 

POPCONTEXT 

INCLUDE 

INCLUDELIB 

ASSUME 


















Directives 


name = expression 

Assigns the numeric value of expression to name. The symbol 
may be redefined later. 

.186 

Enables assembly of instructions for the 80186 processor; 
disables assembly of instructions introduced with later 
processors. Also enables 8087 instructions. 

.286 

Enables assembly of nonprivileged instructions for the 80286 
processor; disables assembly of instructions introduced with later 
processors. Also enables 80287 instructions. 

.286P 

Enables assembly of all instructions (including privileged) for 
the 80286 processor; disables assembly of instructions 
introduced with later processors. Also enables 80287 
instructions. 

.287 

Enables assembly of instructions for the 80287 coprocessor; 
disables assembly of instructions introduced with later 
coprocessors. 

.386 

Enables assembly of nonprivileged instructions for the 80386 
processor; disables assembly of instructions introduced with later 
processors. Also enables 80387 instructions. 

.386P 

Enables assembly of all instructions (including privileged) for 
the 80386 processor; disables assembly of instructions 
introduced with later processors. Also enables 80387 
instructions. 

.387 

Enables assembly of instructions for the 80387 coprocessor. 

.486 

Enables assembly of nonprivileged instructions for the 80486 
processor. 

.486P 

Enables assembly of all instructions (including privileged) for 
the 80486 processor. 

.8086 

Enables assembly of 8086 instructions (and the identical 8088 
instructions); disables assembly of instructions introduced with 
later processors. Also enables 8087 instructions. This is the 
default mode for processors. 
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.8087 


Enables assembly of 8087 instructions; disables assembly of 
instructions introduced with later coprocessors. This is the 
default mode for coprocessors. 

ALIGN |[i number 1 

Aligns the next variable or instruction on a byte that is a 
multiple of number. 

.ALPHA 

Orders segments alphabetically. 

ASSUME segregister.name (, segregister.name J... 

ASSUME dataregister.type [, dataregister.type J... 

ASSUME register: ERROR [, reg/s/Tr: ERROR]]... 

ASSUME [register-4 NOTHING [, register: NOTHING]... 

Enables error-checking for register values. After an ASSUME is 
put into effect, the assembler watches for changes to the values 
of the given registers. ERROR generates an error if the register 
is used at all. NOTHING removes register error-checking. You 
can combine different kinds of assumptions in one statement. 

.BREAK [[.IF condition ]] 

Generates code to terminate a .WHILE or .REPEAT block if 
condition is true. 

\name\ BYTE initializer initializer ]|... 

Allocates and optionally initializes a byte of storage for each 
initializer. Can also be used as a type specifier anywhere a type 
is legal. 

name CATSTR \textiteml I, textitem2\...\ 

Concatenates text items. Each text item can be a literal string, a 
constant preceded by a %, or the string returned by a macro 
function. 

.CODE \name]\ 

When used with .MODEL, indicates the start of a code segment 
called name (the default segment name is _TEXT for tiny, small, 
compact, and flat models, or ntoduleJTEXT for other models). 

COMM definition [, definition}... 

Creates a communal variable with the attributes specified in 
definition. Each definition has the following form: 

\fangtype\ [[NEAR I FARJ label:typel:count\ 

The label is the name of the variable. The type can be any type 
specifier (BYTE, WORD, etc.) or an integer specifying the 
number of bytes. The count specifies the number of data objects 
(one is the default). 

COMMENT delimiter \text\ 

\texf 

| text} delimiter J/cayI 

Treats all text between or on the same line as the delimiters as a 
comment. 
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.CONST 

When used with .MODEL, starts a constant data segment (with 
segment name CONST). This segment has the read-only attribute. 

.CONTINUE I.IF condition} 

Generates code to jump to the top of a .WHILE or .REPEAT 
block if condition is true. 

.CREF 

Enables listing of symbols in the symbol portion of the symbol 
table and browser file. 

.DATA 

When used with .MODEL, starts a near data segment for 
initialized data (segment name _DATA). 

.DATA? 

When used with .MODEL, starts a near data segment for 
uninitialized data (segment name _BSS). 

.DOSSEG 

Orders the segments according to the DOS segment convention: 
CODE first, then segments not in DGROUP, and then segments 
in DGROUP. The segments in DGROUP follow this order: 
segments not in BSS or STACK, then BSS segments, and finally 
STACK segments. Primarily used for ensuring CodeView support 
in MASM stand-alone programs. Same as DOSSEG. 

DOSSEG 

Identical to .DOSSEG, which is the preferred form. 

DB 

Can be used to define data like BYTE. 

DD 

Can be used to define data like DWORD. 

DF 

Can be used to define data like FWORD. 

DQ 

Can be used to define data like QWORD. 

DT 

Can be used to define data like TBYTE. 

DW 

Can be used to define data like WORD. 

\name\ DWORD initializer [, initializer]... 

Allocates and optionally initializes a doubleword (4 bytes) of 
storage for each initializer. Can also be used as a type specifier 
anywhere a type is legal. 

ECHO message 

Displays message to the standard output device (by default, the 
screen). Same as %OUT. 
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.ELSE 

See .IF. 

ELSE 

Marks the beginning of an alternate block within a conditional 
block. See IF. 

END {address} 

Marks the end of a module and, optionally, sets the program 
entry point to address. 

.ENDIF 

See .IF. 

ENDIF 

See IF. 

ENDM 

Terminates a macro or repeat block. See MACRO. FOR. 

FORC. REPEAT, or WHILE. 

name ENDP 

Marks the end of procedure name previously begun with PROC. 
See PROC. 

name ENDS 

Marks the end of segment, structure, or union name previously 
begun with SEGMENT, STRUCT, UNION, or a simplified 
segment directive. 

.ENDW 

See .WHILE. 

name EQU expression 

Assigns numeric value of expression to name. The name cannot 
be redefined later. 

name EQU <text> 

Assigns specified text to name. The name can be assigned a 
different text later. See TEXTEQU. 

.ERR {message} 

Generates an error. 

.ERRB <textitem> I, message 1 

Generates an error if textitem is blank. 

.ERRDEF name I, message J 

Generates an error if name is a previously defined label, variable, 
or symbol. 

.ERRDIFJIJ <textiteml>, <textitem2> [, message} 

Generates an error if the text items are different. If I is given, 
the comparison is case insensitive. 

.ERRE expression [, message} 

Generates an error if expression is false (0). 
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.ERRIDNQI1 <textiteml >, <textitem2> J, message ] 

Generates an error if the text items are identical. If I is given, 
the comparison is case insensitive. 

.ERRNB <textitem> fl, message 1 

Generates an error if textitem is not blank. 

.ERRNDEF name [, message} 

Generates an error if name has not been defined. 

.ERRNZ expression [, message 1 

Generates an error if expression is true (nonzero). 

EVEN 

Aligns the next variable or instruction on an even byte. 

.EXIT {expression} 

Generates termination code. Returns optional expression to 
shell. 

EXITM {expression} 

Terminates expansion of the current repeat or macro block and 
begins assembly of the next statement outside the block. In a 
macro function, expression is the value returned. 

EXTERN \langtype} name \(altid)} '.type 
!, \langtype} name I (altid)} ’.type}... 

Defines one or more external variables, labels, or symbols called 
name whose type is type. The type can be ABS, which imports 
name as a constant. Same as EXTRN. 

EXTERNDEF \langtype} nameitype |, \langtype} nameitype}... 

Defines one or more external variables, labels, or symbols called 
name whose type is type. If name is defined in the module, it is 
treated as PUBLIC. If name is referenced in the module, it is 
treated as EXTERN. If name is not referenced, it is ignored. The 
type can be ABS, which imports name as a constant. Normally 
used in include files. 

EXTRN 

See EXTERN. 

.FARDATA \name} 

When used with .MODEL, starts a far data segment for 
initialized data (segment name FAR_DATA or name). 

.FARDATA? | name} 

When used with .MODEL, starts a far data segment for 
uninitialized data (segment name FAR_BSS or name). 

FOR parameter [:REQ I :=defaidt }, <argument [, argument}...> 
statements 

END1M 

Marks a block that will be repeated once for each argument, with 
the current argument replacing parameter on each repetition. 

Same as IRP. 
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FORC parameter, <string> 
statements 

ENDM 

Marks a block that will be repeated once for each character in 
string, with the current character replacing parameter on each 
repetition. Same as I RPC. 

{name} FWORD initializer [, initializer}... 

Allocates and optionally initializes 6 bytes of storage for each 
initializer. Can also be used as a type specifier anywhere a type 
is legal. 

GOTO macrolabel 

Transfers assembly to the line marked imacrolabel. GOTO is 
permitted only inside MACRO, FOR, FORC, REPEAT, and 
WHILE blocks. The label must be the only directive on the line 
and must be preceded by a leading colon. 

name GROUP segment [, segment}... 

Add the specified segments to the group called name. 

.IF condition1 
statements 

[.ELSEIF condition2 
statements} 

[.ELSE 
statements J 

.ENDIF 

Generates code that tests condition1 (for example, AX > 7) and 
executes the statements if that condition is true. If an .ELSE 
follows, its statements are executed if the original condition was 
false. Note: The conditions are evaluated at run time. 

IF expression 1 
ifstatements 
[ELSEIF expression2 
elseifstatements} 

[ELSE 

elsestatements} 

ENDIF 

Grants assembly of ifstatements if expressionl is true (nonzero) 
or elseifstatements if expression I is false (0) and expression2 is 
true. The following directives may be substituted for ELSEIF: 
ELSEIFIt, ELSEIFDEF, ELSEIFDIF, ELSEIFDIFI, 
ELSEIFE, ELSEIFIDN, ELSEIFIDNI, ELSEIFNB, and 
ELSEIFNDEF. Optionally, assembles elsestatements if the 
previous expression is false. Note: The expressions are evaluated 
at assembly time. 

IFB text item 

Grants assembly if text item is blank. See IF for complete 
syntax. 
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IFDEF name 

Grants assembly if name is a previously defined label, variable, 
or symbol. See IF for complete syntax. 

IFDIFII] textiteml , textitem2 

Grants assembly if the text items are different. If I is given, the 
comparison is case insensitive. See IF for complete syntax. 

IFE expression 

Grants assembly if expression is false (0). See IF for complete 
syntax. 

IFIDNJI1 textiteml , textitem2 

Grants assembly if the text items are identical. If I is given, the 
comparison is case insensitive. See IF for complete syntax. 

IFNB text item 

Grants assembly if textitem is not blank. See IF for complete 
syntax. 

IFNDEF name 

Grants assembly if name has not been defined. See IF for 
complete syntax. 

YHCIMVK filename 

Inserts source code from the source file given by filename into 
the current source file during assembly. The filename must be 
enclosed in angle brackets if it includes a backslash, semicolon, 
greater-than symbol, less-than symbol, single quotation mark, or 
double quotation mark. 

INCHJDELIB library name 

Informs the linker that the current module should be linked with 
libraryname. The libraryname must be enclosed in angle brackets 
if it includes a backslash, semicolon, greater-than symbol, less- 
than symbol, single quotation mark, or double quotation mark. 

name INSTR ^position,l textiteml , textitem2 

Finds the first occurrence of textitem2 in textiteml. The starting 
position is optional. Each text item can be a literal string, a 
constant preceded by a %, or the string returned by a macro 
function. 

INVOKE expression |[, arguments J 

Calls the procedure at the address given by expression , passing 
the arguments on the stack or in registers according to the 
standard calling conventions of the language type. Each 
argument passed to the procedure may be an expression, a 
register pair, or an address expression (an expression preceded by 
ADDR). 

IRP 

See FOR. 

IRPC 

See FORC. 
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name LABEL type 

Creates a new label by assigning the current location-counter 
value and the given type to name. 

name LABEL INEAR I FAR I PROCJ PTR I type} 

Creates a new label by assigning the current location-counter 
value and the given type to name. 

.LALL 

See .LISTMACROALL 

.LFCOND 

See .LISTIF. 

.LIST 

Starts listing of statements. This is the default. 

.LISTALL 

Starts listing of all statements. Equivalent to the combination of 
.LIST, .LISTIF, and .LISTMACROALL. 

.LISTIF 

Starts listing of statements in false conditional blocks. Same as 
.LFCOND? 

.LISTMACRO 

Starts listing of macro expansion statements that generate code 
or data. This is the default. Same as .XALL. 

.LISTMACROALL 

Starts listing of all statements in macros. Same as .LALL. 

LOCAL local name I, localname\... 

Within a macro, LOCAL defines labels that are unique to each 
instance of the macro. 

LOCAL label I [count] ] \:type\ I, label I [count] 1 \type\ ]... 

Within a procedure definition (PROC), LOCAL creates stack- 
based variables that exist for the duration of the procedure. The 
label may be a simple variable or an array containing count 
elements. 

name MACRO [parameter I:REQ I :=default I rVARARGJ J... 

statements 
ENDM [value] 

Marks a macro block called name and establishes parameter 
placeholders for arguments passed when the macro is called. A 
macro function returns value to the calling statement. 

.MODEL memorymodel I, langtype\ I, ostypej I, stackoption\ 

Initializes the program memory model. The memorymodel may 
be TINY, SMALL COMPACT, MEDIUM. LARGE. HUGE, 
or FLAT. The langtvpe may be C, BASIC, FOR I RAN, 
PASCAL, SYSCALL, or STDCALL. The ostype may be 
OS_l)OS or OS_OS2. The stackoption may be NEARSTACK 
or FARSTACK. 
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NAME modulename 

Ignored in version 6.0. 

.N087 

Disallows assembly of all floating-point instructions. 
.NOCREF \name\, name}... 1 

Suppresses listing of symbols in the symbol table and browser 
file. If names are specified, only the given names are suppressed. 
Same as .XCREF. 

.NOLIST 

Suppresses program listing. Same as .XLIST. 

.NOLISTIF 

Suppresses listing of conditional blocks whose condition 
evaluates to false (0). This is the default. Same as .SFCOND. 

.NOLISTMACRO 

Suppresses listing of macro expansions. Same as .SALL. 
OPTION optionlist 

Enables and disables features of the assembler. Available options 
include CASEMAP. DOTNAME, NODOTNAME, 
EMULATOR, NOEMULATOR, EPILOGUE, EXPR16. 
EXPR32. LANGUAGE, LJMP, NOLJMP, M510. 

NOM510. NOKEYWORD. NOSIGNEXTEND, OFFSET, 
OLDMACROS. NOOLDMACROS, OLDSTRUCTS, 
NOOLDSTRUCTS, PROC, PROLOGUE. READONLY. 
NOREADONLY, SCOPED. NOSCOPED. and SEGMENT 

ORG expression 

Sets the location counter to expression. 

%OUT 

See ECHO. 

PAGE |I I length}, width\ 

Sets line length and character width of the program listing. If no 
arguments are given, generates a page break. 

PAGE + 

Increments the section number and resets the page number to 1. 

POPCONTEXT context 

Restores part or all of the current context (saved by the 
PUSHCONTEXT directive). The context can be ASSUMES. 
RADIX, LISTING, CPU, or ALL 

label PROC [ distance} \langtype\ ^visibility] \<prologuearg>\ 

[USES reglist\ [, parameter [:/</£]] [... 

statements 
label ENDP 

Marks start and end of a procedure block called label. The 
statements in the block can be called with the CALL instruction 
or INVOKE directive. 
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label PROTO {distance} \langtype} [, \parameter}\tag}... 

Prototypes a function. 

PUBLIC llangtypej name [, \langtype} name}... 

Makes each variable, label, or absolute symbol specified as name 
available to all other modules in the program. 

PURGE macroname I, macroname}... 

Deletes the specified macros from memory. 

PUSHCONTEXT context 

Saves part or all of the current context: segment register 
assumes, radix value, listing and cref flags, or 
processor/coprocessor values. The context can be ASSUMES, 
RADIX. LISTING, CPU, or ALL 

\name} QWORD initializer [, initializer}... 

Allocates and optionally initializes 8 bytes of storage for each 
initializer. Can also be used as a type specifier anywhere a type 
is legal. 

.RADIX expression 

Sets the default radix, in the range 2 to 16, to the value of 
expression. 

name REAL4 initializer I, initializer}... 

Allocates and optionally initializes a single-precision (4-byte) 
floating-point number for each initializer. 

name REALS initializer [, initializer}... 

Allocates and optionally initializes a double-precision (8-byte) 
floating-point number for each initializer. 

name REAL10 initializer [, initializer}... 

Allocates and optionally initializes a 10-byte floating-point 
number for each initializer. 

recordname RECORD fieldnameiwidth [= expression} 

[, fieldnameiwidth [= expression} J... 

Declares a record type consisting of the specified fields. The 
fieldname names the field, width specifies the number of bits, 
and expression gives its initial value. 

.REPEAT 

statements 
.UNTIL condition 

Generates code that repeats execution of the block of statements 
until condition becomes true. .UNTILCXZ, which becomes true 
when CX is zero, may be substituted for .UNTIL. The condition 
is optional with .UNTILCXZ. 

REPEAT expression 
statements 

ENDM 

Marks a block that is to be repeated expression times. Same as 

REPT. 


38 DIRECTIVES 



REPT 

See REPEAT. 

.SALL 

See .NOLISTMACRO. 

name SBYTE initializer l, initializer]... 

Allocates and optionally initializes a signed byte of storage for 
each initializer. Can also be used as a type specifier anywhere a 
type is legal. 

name SDWORD initializer [, initializer]... 

Allocates and optionally initializes a signed doubleword 
(4 bytes) of storage for each initializer. Can also be used as a 
type specifier anywhere a type is legal. 

name SEGMENT |READONLYJ | align] | combine ] {use} {'class'} 
statements 
name ENDS 

Defines a program segment called name having segment 
attributes align (BYTE. WORD. DWORD. PARA, PAGE), 
combine (PUBLIC, STACK, COMMON, MEMORY, 

AT address , PRIVATE), use (USE16, USE32, FLAT), and 
class. 

• SEQ 

Orders segments sequentially (the default order). 

.SFCOND 

See .NOLISTIF 

name SIZESTR textitem 

Finds the size of a text item. 

.STACK {size 1 

When used with .MODEL, defines a stack segment (with 
segment name STACK). The optional size specifies the number 
of bytes for the stack (default 1,024). The .STACK directive 
automatically closes the stack statement. 

.STARTUP 

Generates program start-up code. 

STRUC 

See STRUCT. 

name STRUCT {alignment} [, NONUNIQUEJ 
fielddeclarations 
name ENDS 

Declares a structure type having the specified fielddeclarations. 
Each field must be a valid data definition. Same as STRUC. 

name SUBSTR textitem, position J, length} 

Returns a substring of textitem , starting at position. The 
textitem can be a literal string, a constant preceded by a %, or 
the string returned by a macro function. 
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SUBTITLE text 

Defines the listing subtitle. Same as SUBTTL. 

SUBTTL 

See SUBTITLE. 

name SWORD initializer [, initializer}... 

Allocates and optionally initializes a signed word (2 bytes) of 
storage for each initializer. Can also be used as a type specifier 
anywhere a type is legal. 

\name\ TBYTE initializer [, initializer}... 

Allocates and optionally initializes 10 bytes of storage for each 
initializer. Can also be used as a type specifier anywhere a type 
is legal. 

name TEXTEQU I textitem} 

Assigns textitem to name. The textitem can be a literal string, a 
constant preceded by a %, or the string returned by a macro 
function. 

.TFCOND 

Toggles listing of false conditional blocks. 

TITLE text 

Defines the program listing title. 
name TYPEDEF type 

Defines a new type called name, which is equivalent to type, 
name UNION {alignment} [, NONUNIQUEJ 
fielddeclarations 
Inamel ENDS 

Declares a union of one or more data types. The fielddeclarations 
must be valid data definitions. Omit the ENDS name label on 
nested UNION definitions. 

.UNTIL 

See .REPEAT. 

.UNTILCXZ 

See .REPEAT. 

•WHILE condition 
statements 

.ENDW 

Generates code that executes the block of statements while 
condition remains true. 

WHILE expression 
statements 

ENDM 

Repeats assembly of block statements as long as expression 
remains true. 
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| name} WORD initializer [, initializer}... 

Allocates and optionally initializes a word (2 bytes) of storage 
for each initializer. Can also be used as a type specifier 
anywhere a type is legal. 

.X ALL 

See .LISTMACRO. 

.XCREF 

See .NOCREF. 

.XLIST 

See .NOLIST. 


DIRECTIVES 41 




Symbols and Operators 


Predefined Symbols 
Operators 

Run-Time Operators 



Topical Cross-Reference for 

Symbols 

Segment 

Macro 

Date and Time 

Miscellaneous 

Information 

Functions 

Information 

$ 

(©code 

@CatStr 

<£Date 

? 

@CodeSize 

@InStr 

@Time 


(©CurSeg 

@SizeStr 


@B 

(a data 

@SubStr 

File Information 

@F 

(©DataSize 

(©fardata 

Environment 

@FileCur 
(& FileName 


(©fardata? 

Information 

(©Line 


(©Model 

@stack 

(©WordSize 

@Cpu 

@Environ 

(©Interface 



Topical Cross-Reference for Operators 


Arithmetic 

+ MOD 

* ’[] 

Macro 

<> % 

! & 


Relational 


F.Q 


NE 

GT 


Logical 
and Shift 

AND 

OK 

XOR 

NOT 

SHE 

SHR 

Record 

MASK 

WIDTH 

Segment 


Type 

HIGH 

HIGHWORD 

LOW 

LOWWORD 

PTR 

SHORT 

SIZE 

SIZEOF 

LENGTH 

LENGTHOE 

THIS 

TYPE 

OPATTR 


Control Flow 


&& <= 

II > 

& < 

Miscellaneous 

dup 


CARRY? 

OVERFLOW? 

PARITY? 

SIGN? 

ZERO? 


GE 

LT 

LE 


SEG 

OFFSET 














Predefined Symbols 


$ 

The current value of the location counter. 

9 

In data declarations, a value that the assembler allocates but does 
not initialize. 

(©(©: 

Defines a local code label. Overrides any previous labels. 

See @B and @F. 

<©B 

The location of the previous label. 

@CatStr( string] [, string2...j ) 

Macro function that concatenates one or more strings. Returns a 
string. 

(©code 

The name of the code segment (text macro). 

(©CodeSize 

0 for TINY, SMALL, COMPACT, and FLAT models, and 1 
for MEDIUM, LARGE, and HUGE models (numeric equate). 

(®Cpu 

A bit mask specifying the processor mode (numeric equate). 

(©CurSeg 

The name of the current segment (text macro). 

(©data 

The name of the default data group. Evaluates to DGROUP for all 
models except FLAT. Evaluates to FLAT under the FLAT 
memory model (text macro). 

(©DataSize 

0 for TINY, SMALL, MEDIUM, and FLAT models, 1 for 
COMPACT and LARGE models, and 2 for HUGE model 
(numeric equate). 

(©Date 

The system date in the format mm/dd/yy (text macro). 

(©Environ! envvar ) 

Value of environment variable envvar (macro function). 

<©F 

The location of the next (6><®: label. 

(©fardata 

The name of the segment defined by the .FARDATA directive 
(text macro). 
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(©fardata? 

The name of the segment defined by the .FARDATA? directive 
(text macro). 

(©FileCur 

The name of the current file (text macro). 

(©FileName 

The base name of the main file being assembled (text macro). 

(®InStr( ^position}, string1, string2 ) 

Macro function that finds the first occurrence of string2 in 
string!. The starting position within string! is optional. 
Returns an integer (0 if string2 is not found). 

(©Interface 

Information about the language parameters (numeric equate). 

(©Line 

The source line number in the current file (numeric equate). 
(©Model 

1 for TINY model, 2 for SMALL model, 3 for COMPACT 
model, 4 for MEDIUM model, 5 for LARGE model, 6 for 
HUGE model, and 7 for FLAT model (numeric equate). 

(®SizeStr( string ) 

Macro function that returns the length of the given string. 
Returns an integer. 

(®SubStr( string, position [, length }) 

Macro function that returns a substring starting at position. 

(©stack 

DGROUP for near stacks or STACK for far stacks (text macro). 

(©Time 

The system time in 24-hour hh:mm:ss format (text macro). 

(© Version 

600 in MASM 6.0 (text macro). 

(©WordSize 

2 for a 16-bit segment or 4 for a 32-bit segment (numeric 
equate). 
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Operators 


expression1 + expression2 

Returns expression1 plus expression2. 

expressionl - expression2 

Returns expressionl minus expression2. 

expressionl * expression2 

Returns expressionl times expression2. 

expressionl / expression2 

Returns expressionl divided by expression2. 

-expression 

Reverses the sign of expression. 

[ expression1 1 [expression2 ] 

Returns expressionl plus [ expression2 ]. 

segment: expression 

Overrides the default segment of expression with segment. The 
segment can be a segment register, group name, segment name, 
or segment expression. The expression must be a constant. 

expression, field I .field}... 

Returns expression plus the offset of field within its structure or 
union. 

[register], field \.field\... 

Returns value at the location pointed to by register plus the 
offset of field within its structure or union. 

<text> 

Treats text as a single literal element. 

"text" 

Treats “text" as a string. 

’ text ’ 

Treats 'text' as a string. 

[character 

Treats character as a literal character rather than as an operator or 
symbol. 

;text 

Treats text as a comment. 


Treats text as a comment that will not be listed in expanded 
macros. 


% expression 

Treats the value of expression in a macro argument as text. 
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&parameter& 

Replaces parameter with its corresponding argument value. 

ABS 

See the EXTERNDEF directive. 

ADDR 

See the INVOKE directive. 

expression1 AND expression2 

Returns the result of a bitwise Boolean AND done on 
expressionl and expression2. 

count DUP (initialvalue [, initialvalue}...) 

Specifies count number of declarations of initialvalue. 

expressionl EQ expression2 

Returns true (-1) if expressionl equals expression2, or returns 
false (0) if it does not. 

expressionl GE expression2 

Returns true (-1) if expressionl is greater than or equal to 
expression2, or returns false (0) if it is not. 

expressionl GT expression2 

Returns true (-1) if expressionl is greater than expression2, or 
returns false (0) if it is not. 

HIGH expression 

Returns the high byte of expression. 

HIGHWORD expression 

Returns the high word of expression. 

expressionl LE expression2 

Returns true (-1) if expressionl is less than or equal to 
expression2 , or returns false (0) if it is not. 

LENGTH variable 

Returns the number of data items in variable created by the first 
initializer. 

LENGTHOF variable 

Returns the number of data objects in variable. 

LOW expression 

Returns the low byte of expression. 

LOW WORD expression 

Returns the low word of expression. 

LROFFSET expression 

Returns the offset of expression. Same as OFFSET, but it 
generates a loader resolved offset, which allows Windows to 
relocate code segments. 

express ion 1 LT expression2 

Returns true (-1) if expressionl is less than expression2, or 
returns false (0) if it is not. 
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MASK {recordfieldname I record ) 

Returns a bit mask in which the bits in recordfieldname or record 
are set and all other bits are cleared. 

expression1 MOD expression2 

Returns the remainder of dividing expressionI by expression!. 

expressionl NE expression2 

Returns true (-1) if expressionl does not equal expressionl , or 
returns false (0) if it does. 

NOT expression 

Returns expression with all bits reversed. 

OFFSET expression 

Returns the offset of expression. 

OPATTR expression 

Returns a word defining the mode and scope of expression. The 
low byte is identical to the byte returned by .TYPE. The high 
byte contains additional information. 

expressionl OR expression2 

Returns the result of a bitwise OR done on expressionl and 
expression2. 

type PTR expression 

Forces the expression to be treated as having the specified type. 

^distance 1 PTR type 

Specifies a pointer to type. 

SEG expression 

Returns the segment of expression, 
expression SHL count 

Returns the result of shifting the bits of expression left count 
number of bits. 

SHORT label 

Sets the type of label to short. All jumps to label must be short 
(within the range -128 to +127 bytes from the jump instruction 
to label). 

expression SHR count 

Returns the result of shifting the bits of expression right count 
number of bits. 

SIZE variable 

Returns the number of bytes in variable allocated by the first 
initializer. 

SIZEOF | variable I type } 

Returns the number of bytes in variable or type. 

THIS type 

Returns an operand of specified type whose offset and segment 
values are equal to the current location-counter value. 
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.TYPE expression 

See OPATTR. 

TYPE expression 

Returns the type of expression. 

WIDTH {recordfieldname I record ) 

Returns the width in bits of the current recordfieldname or record. 

expression] XOR expression2 

Returns the result of a bitwise Boolean XOR done on 
expressionI and expression2. 
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Run-Time Operators 


The following operators are used only within .IF, .WHILE, or 
.REPEAT blocks and are evaluated at run time, not at assembly 
time: 


expression1 == expression2 
Is equal to. 

expression1 != expression2 
Is not equal to. 

expression] > expression2 
Is greater than. 

expression1 >= expression2 

Is greater than or equal to. 

expression1 < expression2 
Is less than. 

expression1 <= expression2 
Is less than or equal to. 

expression! || expression2 
Logical OR. 

expression1 && expression2 
Logical AND. 

expression! & expression2 
Bitwise AND. 

!expression 

Logical negation. 

CARRY? 

Carry (C) processor flag. 

OVERFLOW? 

Overflow (O) processor flag. 

PARITY? 

Parity (P) processor flag. 

SIGN? 

Sign (S) processor flag. 

ZERO? 

Zero (Z) processor flag. 
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Processor 


Interpreting Processor Instructions 
Flags 
Syntax 
Examples 
Clock Speeds 

Timings on the 8088 and 8086 Processors 
Timings on the 80286-80486 Processors 
Interpreting Encodings 
Interpreting 80386/486 Encoding Extensions 
16-Bit Encoding 
32-Bit Encoding 
Address-Size Prefix 
Operand-Size Prefix 

Encoding Differences for 32-Bit Operations 
Scaled Index Base Byte 
Instructions 




Topical Cross-Reference for Processor 


Data T ransfer String 


Compare 


MOV 

MOVS 

MOVSXS 

MOVZXS 

XCHG 

LODS 

STOS 

LEA 

LDS/LES 

LFS/LGS/LSS* 

XLAT/XLATB 

BSVVAP# 

CMPXCHG# 

XADD# 

Stack 

PUSH 

PUSHF 

PUSHA* 

POP 
POPF 
POP A* 
ENTER* 
LEAVE* 


MOVS 

LODS 

STOS 

SCAS 

CMPS 

INS* 

OUTS* 

REP 

REPE/REPZ 

REPNE/REPNZ 

Arithmetic 

ADD 

ADC 

INC 

SUB 

SBB 

DEC 

NEG 

IMUL 

MUL 

DIV 

IDIV 

XADD# 


CMP 

CMPS 

TEST 

BT$ 


BTC* 


BTRS 

BTSS 

CMPXCHG# 


Unconditional 

Transfer 

CALL 

INT 

IRET 

RET 

RETN/RETF 

JMP 


Loop 

LOOP 

LOOPE/LOOPZ 


Input/Output 

IN 

INS* 

OUT 

OUTS* 

Type 

Conversion 

CBW 

CWD 

CWDE$ 

CDQS 

BSVVAP# 


Flag 

CLC 

CLD 

CLI 

CMC 

STC 

STD 

STI 

POPF 

PUSHF 

LAHF 

SAHF 


Bit Operations 

AND 

OR 

XOR 

NOT 

ROL 

ROR 

RCL 

RCR 

SHL/SAL 

SHR 

SAR 

SHLDS 

SHRI)S 

BSFS 

BSR5 

BT* 

BTC** 

BTRS 

BTSS 


Conditional 

Transfer 

JB/JNAE 

JAE/JNB 

JBE/JNA 

JA/JNBE 

JE/JZ 

JNE/JNZ 

JL/JNGE 

JGE/JNL 

JLE/JNG 

JG/JNLE 

JS 

JNS 

JC 

JNC 

JO 

JNO 

JP/JPE 

JNP/JPO 

JCXZ/JECXZ 

INTO 

BOUND* 


* 801 86-80486 only, t 80286-80486 only. 
§ 80386/486 only. # 80486 only. 


Conditional Set 

SETB/SETNAES 

SETAE/SETNB* 

SETBE/SETNAS 

SETA/SETNBES 

SETE/SETZS 

SETNE/SETNZS 

SETL/SETNGES 

SETGE/SETNLS 

SETLE/SETNGS 

SETG/SETNLES 

SETS* 

SETNSS 

SETCS 

SETNCS 

SETOS 

SETNOS 

SETP/SETPES 

SETNP/SETPOS 


BCD Conversion 

AAA 

AAS 

AAM 

AAD 

DAA 

DAS 

Processor 

Control 

NOP 

WAIT 

LOCK 

HLT 

Process Control 

ARPLt 

CLTSt 

LARt 

LGDT/LIDT/LLDT+ 

LMSW+ 

LSLt 

SGDT/SIDT/SLDTt 

SMSWt 

STRt 

VERR+ 

VERWt 
MOV special 8 
INVD# 

INVLPG# 

WBINVD# 















Interpreting Processor Instructions 


This section provides an alphabetical reference to the instructions for 
the 8086, 8088, 80286, 80386, and 80486 processors. Figure 1 gives a 
key to each element of the reference. 


Name Restriction (optional) 


BSF/BSR ) 

Bit Scan 
80386/486 Only X 






Scans an operand lo find ihe first set bit. If a set bit is found, the zero 
flag is set and the destination operand is loaded with Ihe bit index of the 
first set bit encountered. If no set bit is found, the zero flag is cleared. 
BSF (Bit Scan Forward) scans from bit 0 to the most significant bit. 
BSR (Bit Scan Reverse) scans from the most significant bit of an 
operand to bit 0. 


h 


1 .■y 011 " 1 1 l, " l "° 0 1 1 1 I** «>■'■■■ 1 

BSF re% Id.rex lb 

BSF rey32.reyJ2 

bsf cx. bx 

S8 2W Z 


bsf ecx. bitmask 

1 Sr 


- Flags 


- Description 


- Encoding 


Syntax 


Examples Clock Speeds 


Figure 1 Instruction Key 


Flags 

The first row of the display has a one-character abbreviation for the flag 
name. Only the flags common to all processors are shown. 

O Overflow T Trap A Auxiliary carry 

D Direction S Sign P Parity 

I Interrupt Z Zero C Carry 

The second line has codes indicating how the flag can be affected. 

1 Sets the flag 

0 Clears the flag 

? May change the flag, but the value is not predictable 

blank No effect on the flag 

± Modifies according to the rules associated with the flag 
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Syntax 

Each encoding variation may have different syntaxes corresponding to 
different addressing modes. The following abbreviations are used: 

reg A general-purpose register of any size 

segreg One of the segment registers: DS, ES, SS, or CS (also FS or 
GS on the 80386/486) 

accum An accumulator register of any size: AL or AX (also EAX on 
the 80386/486) 

mem A direct or indirect memory operand of any size 

label A labeled memory location in the code segment 

src,dest A source or destination memory operand used in a string 
operation 

immed A constant operand 

In some cases abbreviations have numeric suffixes to specify that the 
operand must be a particular size. For example, reg!6 means that only 
a 16-bit (word) register is accepted. 

Examples 

One or more examples are shown for each syntax. Their position is not 
related to the clock speeds in the right column. 

Clock Speeds 

Column 3 shows the clock speeds for each processor. Sometimes an 
instruction may have more than one clock speed. Multiple speeds are 
separated by commas. If several speeds are part of an expression, they 
are enclosed in parentheses. The following abbreviations are used to 
specify variations: 
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EA Effective address. This applies only to the 8088 and 8086 

processors, as described in the next section. 

b,w,d Bvte. word, or doubleword operands. 

pm Protected mode. 

n Iterations. Repeated instructions may have a base number of 

clocks plus a number of clocks for each iteration. For 
example, 8+4n means eight clocks plus four clocks for each 
iteration. 

noj No jump. For conditional jump instructions, noj indicates 

the speed if the condition is false and the jump is not taken. 

m Next instruction components. Some control transfer 

instructions take different times depending on the length of 
the next instruction executed. On the 8088 and 8086, m is 
never a factor. On the 80286, m is the number of bytes in 
the instruction. On the 80386/486, m is the number of 
components. Each byte of encoding is a component, and the 
displacement and data are separate components. 

W88.88 8088 exceptions. See “Timings on the 8088 and 8086 

Processors.” 

Clocks can be converted to nanoseconds by dividing one microsecond 
by the number of megahertz (MHz) at which the processor is running. 
For example, on a processor running at 8 MHz, one clock takes 125 
nanoseconds (1000 MHz per nanosecond / 8 MHz). 

The clock counts are for best-case timings. Actual timings vary 
depending on wait states, alignment of the instruction, the status of the 
prefetch queue, and other factors. 

Timings on the 8088 and 8086 Processors 

Because of its 8-bit data bus, the 8088 always requires two fetches to 
get a 16-bit operand. Instructions that work on 16-bit memory operands 
therefore take longer on the 8088 than on the 8086. Separate 8088 
timings are shown in parentheses following the main timing. For 
example, 9 (W88=13) means that the 8086 with any operands or the 
8088 with byte operands take 9 clocks, but the 8088 with word 
operands takes 13 clocks. Similarly, 16 (88=24) means that the 8086 
takes 16 clocks, but the 8088 takes 24 clocks. 
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On the 8088 and 8086, the effective address (EA) value must be added 
for instructions that operate on memory operands. A displacement is 
any direct memory or constant operand, or any combination of the two. 
Below are the number of clocks to add for the effective address. 


Components 

EA Clocks 

Examples 

Displacement 

6 

mov 

ax,stuff 
ax,stuff+2 

Base or index 

5 

mov 

mov 

ax,[bx] 
ax, [di] 

Displacement 
plus base or index 

9 

mov 

mov 

ax,[bp+8] 
ax,stuff[di] 

Base plus index 
(BP+DI.BX+SI) 

7 

mov 

mov 

ax,[bx+si] 
ax,[bp+di] 

Base plus index 
(BP+SI.BX+DI) 

8 

mov 

mov 

ax,[bx+di] 
ax,[bp+si] 

Base plus index 
plus displacement 
(BP+DI+rfiip.BX+SI+rfii/j) 

11 

mov 

mov 

ax,stuff[bx+si] 
ax,[bp+di+8] 

Base plus index 
plus displacement 
(B P+SI +di.sp,B X + D1 +disp) 

12 

mov 

mov 

ax,stuff [bx+di] 
ax,[bp+si+20] 

Segment override 

EA+2 

mov 

mov 

ax,es:stuff 
ax,ds:[bp+10] 


Timings on the 80286-80486 Processors 

On the 80286-80486 processors, the effective address calculation is 
handled by hardware and is therefore not a factor in clock calculations 
except in one case. If a memory operand includes all three possible 
elements—a displacement, a base register, and an index register—then 
add one clock. On the 80486, the extra clock is not always used. 
Examples are shown below. 

mov ax,[bx+di] ;No extra 

mov ax,array[bx+di] ;One extra 

mov ax,[bx+di+6] ;One extra 

Note: 80186 and 80188 timings are different from 8088, 8086, and 
80286 timings. They are not shown in this manual. Timings are also 
not shown for protected-mode transfers through gates or for the virtual 
8086 mode available on the 80386/486 processors. 
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Interpreting Encodings 

Encodings are shown for each variation of the instruction. This section 
describes encoding for all processors except the 80386/486. The 
encodings take the form of boxes filled with Os and Is for bits that are 
constant for the instruction variation, and abbreviations (in italics) for 
the following variable bits or bitfields: 

d Direction bit. If set. do memory to register or register to 

register; the reg field is the destination. If cleared, do 
register to memory; the reg field is the source. 

w Word/bvte bit. If set, use 16-bit or 32-bit operands. If 

cleared, use 8-bit operands. 

s Sign bit. If set, sign-extend 8-bit immediate data to 16 bits. 

mod Mode. This two-bit field gives the register/memory mode 

with displacement. The possible values are shown below. 

mod Meaning 

00 This value can have two meanings: 

If r/m is 110, a direct memory operand is used. 

If r/m is not 110, the displacement is 0 and an 
indirect memory operand is used. The operand must 
be based, indexed, or based indexed. 

01 An indirect memory operand is used with an 8-bit 

displacement. 

10 An indirect memory operand is used with a 16-bit 
displacement. 

1 1 A two-register instruction is used; the reg field 

specifies the destination and the rim field specifies 
the source. 

reg Register. This three-bit field specifies one of the general- 

purpose registers: 


reg 

16/32-bit if w= 1 

8-bit if vt ,= 0 

000 

AX/E AX 

AL 

001 

CX/ECX 

CL 

010 

DX/EDX 

DL 

01 1 

BX/EBX 

BL 

100 

SP/ESP 

AH 

101 

BP/EBP 

CH 

1 10 

SI/ESI 

DH 

1 1 1 

DI/EDI 

BH 

The re 

g field is sometimes 

used to specify 


information rather than a register. 
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sreg Segment register. This field specifies one of the segment 

registers. 


sreg Register 



000 

ES 


001 

CS 


010 

SS 


Oil 

DS 


100 

FS 


101 

GS 

rim 

Reaister/memorv. This three-bit field specifies a register or 


memory 

r/m operand. 


If the mod field is 11, rim specifies the source register using 
the reg field codes. Otherwise, the field has one of the 
following values: 


r/m 

Operand Address 


000 

DS: [BX+SI+dwp] 


001 

DS:[BX+DI +disp] 


010 

SS:[BP+SI +disp\ 


011 

SS:[BP+DI +disp] 


100 

DS:[SI +disp] 


101 

DS:\D\+disp] 


110 

111 

SS:[BP +disp)* 

DS:[B X+disp] 

disp 

Displacement. These bvtes give the offset for memorv 
operands. The possible lengths (in bytes) are shown in 
parentheses. 

data 

Data. These bytes gives the actual value for constant values. 
The possible lengths (in bytes) are shown in parentheses. 

If a memory operand has a segment override, the entire instruction has 
one of the following bytes as a prefix: 

Prefix 


Seement 

00101110 

(2Eh) 

CS 

00111110 

(3Eh) 

DS 

00100110 

(26h) 

ES 

00110110 

(36h) 

SS 

01100100 

(64h) 

FS 

01100101 

(65h) 

GS 


If mod is (K) and rim is 110, ihcn the operand is treated as a direct memory operand. This means that 
the operand [BP] is encoded as [ BP+0 ] rather than having a short-form like other register indirect 
operands. Encoding [BX] takes one byte, but encoding [BP] takes two. 
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Example 

As an example, assume you want to calculate the encoding for the 
following statement (where warray is a 16-bit variable): 

add warray[bx+di],-3 

First look up the encoding for the immediate to memory syntax of the 
ADD instruction: 


| lOOOOO.vu | | mod ,000,rl m \ disp (0,1, or 2) data <0,1, or 2) 

Since the destination is a word operand, the w bit is set. The 8-bit 
immediate data must be sign-extended to 16 bits in order to fit into the 
operand, so the s bit is also set. The first byte of the instruction is 
therefore 10000011 (83h). 

Since the memory operand can be anywhere in the segment, it must 
have a 16-bit offset (displacement). Therefore the mod field is 10. The 
reg field is 000, as shown in the encoding. The r/m coding for 
[bx+di +disp] is 001. The second byte is 10000001 (81h). 

The next two bytes are the offset of warray. The low byte of the 
offset is stored first and the high byte second. For this example, 
assume that warray is located at offset lOEFh. 

The last byte of the instruction is used to store the 8-bit immediate 
value -3 (FDh). This value is encoded as 8 bits (but sign-extended to 
16 bits by the processor). 

The encoding is shown below in hexadecimal: 

83 81 EF 10 FD 

You can confirm this by assembling the instruction and looking at the 
resulting assembly listing. 

Interpreting 80386/486 Encoding Extensions 

This book shows 80386/486 encodings for instructions that are 
available only on the 80386/486 processors. For other instructions, 
encodings are shown only for the 16-bit subset available on all 
processors. This section tells how to convert the 80286 encodings 
shown in the book to 80386/486 encodings that use extensions such as 
32-bit registers and memory operands. 
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The extended 80386/486 encodings differ in that they can have 
additional prefix bytes, a Scaled Index Base (SIB) byte, and 32-bit 
displacement and immediate bytes. Use of these elements is closely tied 
to the segment word size. The use type of the code segment determines 
whether the instructions are processed in 32-bit mode (USE32) or 
16-bit mode (USE16). Current versions of MS-DOS® and Microsoft 
Windows and version 1.x of OS/2 use 16-bit mode only. Version 2.0 
of OS/2 uses 32-bit mode. 

The bytes that can appear in an instruction encoding are shown below. 


16-Bit Encoding 


Opcode 

mod-reg- 

r/m 

d ‘ sp 

immed 

(1-2) 

(0-1) 

(0-2) 

(0-2) 


32-Bit Encoding 


Address- 

Operand- 

Opcode 

mod-reg- 

Scaled 

disp 

immed 

Size (67h) 

Size (66h) 


rlm 

Index Base 



(0-1) 

(0-1) 

(1-2) 

(0-1) 

(0-1) 

(0-4) 

(0-4) 


Additional bytes may be added for a segment prefix, a repeat prefix, or 
the LOCK prefix. 

Address-Size Prefix 

The address-size prefix determines the segment word size of the 
operation. It can override the default size for calculating the 
displacement of memory addresses. The address prefix byte is 67h. The 
assembler automatically inserts this byte where appropriate. 

In 32-bit mode (USE32 or FLAT code segment), displacements are 
calculated as 32-bit addresses. The effective address-size prefix must be 
used for any instructions that must calculate addresses as 16-bit 
displacements. In 16-bit mode the defaults are reversed. The prefix must 
be used to specify calculation of 32-bit displacements. 

Operand-Size Prefix 

The operand-size prefix determines the size of operands. It can override 
the default size of registers or memory operands. The operand-size 
prefix byte is 66h. The assembler automatically inserts this byte where 
appropriate. 
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In 32-bit mode, the default sizes for operands are 8 bits and 32 bits 
(depending on the w bit). For most instructions, the operand-size prefix 
must be used for any instructions that use 16-bit operands. In 16-bit 
mode, the default sizes are 8 bits and 16 bits. The prefix must be used 
for any instructions that use 32-bit operands. Some instructions use 
16-bit operands, regardless of mode. 

Encoding Differences for 32-Bit Operations 

When 32-bit operations are performed, the meaning of certain bits or 
fields are different than for 16-bit operations. The changes may affect 
default operations in 32-bit mode, or 16-bit mode operations in which 
the address-size prefix or the operand-size prefix is used. The following 
fields may have a different meaning for 32-bit operations than the 
meaning described in the “Interpreting Encodings” section: 

H’ Word/bvte bit. If set, use 32-bit operands. If cleared, use 

8-bit operands. 

s Sign bit. If set, sign-extend 8-bit or 16-bit immediate data 

to 32 bits. 

mod Mode. This field indicates the register/memory mode. The 

value 11 still indicates a register-to-register operation with 
rim containing the code for a 32-bit source register. 
However, other codes have different meanings as shown in 
the tables in the next section. 

reg Register. The codes for 16-bit registers are extended to 

32-bit registers. For example, if the reg field is 000, EAX 
is used instead of AX. Use of 8-bit registers is unchanged. 

sreg Segment register. The 80386 has the following additional 

segment registers: 


sreg 

Register 

100 

FS 

101 

GS 


rim Register/memory. If the rim field is used for the source 

register, 32-bit registers are used as for the reg field. If the 
field is used for memory operands, the meaning is 
completely different than for 16-bit operations, as shown in 
the tables in the next section. 

disp Displacement. This field is four bytes for 32-bit addresses. 

data Data. Immediate data can be up to four bytes. 
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Scaled Index Base Byte 

Many 80386/486 extended memory operands are too complex to be 
represented by a single mod-reg-rlm byte. For these operands, a value 
of 100 in the rim field signals the presence of a second encoding byte 
called the Scaled Index Base (SIB) byte. The SIB byte is made up of the 
following fields: 


| ,v\ iiiihw huse | 


ss Scaling Field. This two-bit field specifies one of the 

following scaling factors: 

ss Scale 

00 1 

01 2 

10 4 

11 8 

index Index Register. This three-bit field specifies one of the 
following index registers: 


index 

Reeister 

000 

EAX 

001 

ECX 

010 

EDX 

01 1 

EBX 

100 

no index 

101 

EBP 

1 10 

ESI 

1 1 1 

EDI 


Note that ESP cannot be an index register. If the index field 
is 100, then the ss field must be 00. 

base Base Register. This three-bit field combines with the mod 

field to specify the base register and the displacement. Note 
that the base field only specifies the base when the rim field 
is 100. Otherwise, the r/m field specifies the base. 
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The possible combinations of the mod , rim , scale , mt/e.v, and base 
fields are shown below: 

Fields for 32-Bit Fields for 32-Bit 


Nonindexed Operands 

Indexed Operands 

mod 

rim 

Operand 

mod 

rim 

base 

Operand 

00 

000 

DS:[EAX] 

00 

100 

000 

DS:[EAX+(5ca/e*/flr/e.v)] 

00 

001 

DS:[ECX] 

00 

100 

001 

DS:[ECX+(«a/e*/We.v)] 

00 

010 

DS:[EDX] 

00 

100 

010 

DS:[EDX+(.rra/e*(>i<r/e.v)] 

00 

Oil 

DS:[EBX] 

00 

100 

01 1 

DS: [EB X+(,scale*index)) 

00 

100 

SIB used-► 

00 

100 

100 

SS:[ESP +(scale*index)] 

00 

101 

DS:disp32i 

00 

100 

101 

DS:[disp32+(scale*index)]l 

00 

110 

DS:[ESI] 

00 

100 

110 

DS:[ESI+(.rca/e*;>)t/e.v)] 

00 

111 

DS:[EDI] 

.00 

100 

111 

DS:[EDI+(sc'a/e*/«<fcv)] 

01 

000 

DS:[EA X+disp8] 

01 

100 

000 

DS: [E A X+(scale*index)+disp8] 

01 

001 

DS:[EC X+disp8] 

01 

100 

001 

DS: [EC X+(scale*index)+disp8] 

01 

010 

DS:[ED X+disp8) 

01 

100 

010 

DS:[ED X+(scale*index)+disp8] 

01 

01 1 

DS:[EB X+disp8] 

01 

100 

Oil 

DS \[EBX+(scale*index)+disp8] 

01 

100 

SIB used--*■ 

01 

100 

100 

SS:[ESP+[scale*index)+disp8\ 

01 

101 

SS:[EBP +disp8] 

01 

100 

101 

SS:[EBP +{scale*index)+disp8] 

01 

110 

DS:[ESI +disp8) 

01 

100 

110 

DS:[ESI +(scale*index)+disp8] 

01 

111 

DS:[EDI +dis P 8] 

.01 

100 

111 

DS: [ED\+(scale*index)+disp8] 

10 

000 

DS:[EA X+disp32] 

10 

100 

000 

DS:[EAX+(scale*index)+disp32] 

10 

001 

DS:[EC X+disp32] 

10 

100 

001 

DS: [ ECX+(scale*index)+disp32] 

10 

010 

DS:[ED X+disp32] 

10 

100 

010 

DS: [ EDX+(scale*index)+disp32} 

10 

Oil 

DS:[EBX+d/spJ2] 

10 

100 

01 1 

DS: [ EB X+(scale*index)+disp32 ] 

10 

100 

SIB used- 

10 

100 

100 

SS:[ESP+(scale*index)+disp32] 

10 

101 

SS:[EBP +disp32] 

10 

100 

101 

S S: [ E B P+(scale*index)+disp3 2 [ 

10 

110 

DS:[ESI +disp32] 

10 

100 

110 

DS: [ E S I+( scale * index)+disp32 ] 

10 

111 

DS:[EDI +disp32] 

. 10 

100 

111 

DS: [EDI +{scale*index)+disp32] 


t The operand [EBP] must be encoded as [EBP+0] (the 0 is an 8-bit displacement). 
Similarly, [EBP +(scale*index)] must be encoded as [EBP+(scale*index)+0 ]. The 
short encoding form available with other base registers cannot be used with EBP. 


If a memory operand has a segment override, the entire instruction has 
one of the prefixes discussed earlier in the “Interpreting Encodings” 
section or one of the following prefixes for the segment registers 
available only on the 80386/486: 

Segment 
FS 
GS 


Prefix 

01100100 (64h) 
01100101 (65h) 
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Example 

Assume you want to calculate the encoding for the following statement 
(where warray is a 16-bit variable). Assume also that the 
instruction is used in 16-bit mode. 

add warray[eax+ecx*2],-3 

First look up the encoding for the immediate to memory syntax of the 
ADD instruction: 


| lOOOOOsu' | | mod ,000 ,rl in \ disp (0,1, or 2) data (I or 2) 

This encoding must be expanded to account for 80386/486 extensions. 
Note that the instruction operates on 16-bit data in a 16-bit mode 
program. Therefore, the operand-size prefix is not needed. However, the 
instruction does use 32-bit registers to calculate a 32-bit effective 
address. Thus the first byte of the encoding must be the effective 
address-size prefix, 01100111 (67h). 

The opcode byte is the same (83h) as for the 80286 example described 
in the “Interpreting Encodings” section. 

The mod-reg-rlm byte must specify a based indexed operand with a 
scaling factor of two. This operand cannot be specified with a single 
byte, so the encoding must also use the SIB byte. The value 100 in the 
rim field specifies an SIB byte. The reg field is 000, as shown in the 
encoding. The mod field is 10 for operands that have base and scaled 
index registers and a 32-bit displacement. The combined mod, reg, and 
rim fields for the second byte are 10000100 (84h). 

The SIB byte is next. The scaling factor is 2, so the ss field is 01. The 
index register is ECX, so the index field is 001. The base register is 
EAX, so the base field is 000. The SIB byte is 01001000 (48h). 

The next four bytes are the offset of warray. The low bytes are 
stored first. For this example, assume that warray is located at 
offset lOEFh. This offset only requires two bytes, but four must be 
supplied because of the addressing mode. A 32-bit address can be safely 
used in 16-bit mode as long as the upper word is 0. 

The last byte of the instruction is used to store the 8-bit immediate 
value -3 (FDh). 

The encoding is shown below in hexadecimal: 

67 83 84 48 00 00 EF 10 FD 
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AAA 

ASCII Adjust after Addition 


0 

D 

I 

T 

S 

z 

A 

P 

C 

? 




7 

7 

± 

? 

± 


Adjusts the result of an addition to a decimal digit (0-9). The previous 
addition instruction should place its 8-bit sum in AL. If the sum is 
greater than 9h, AH is incremented and the carry and auxiliary carry 
flags are set. Otherwise, the carry and auxiliary carry flags are cleared. 


| 00110111 I 


o 

D 

I 

T 

S 

Z 

A 

P 

C 

7 




± 

± 

? 

± 

? 


AAD 

ASCII Adjust before Division 


Converts unpacked BCD digits in AH (most significant digit) and AL 
(least significant digit) to a binary number in AX. This instruction is 
often used to prepare an unpacked BCD number in AX for division by 
an unpacked BCD digit in an 8-bit register. 


| 11010101 —I I 00001010 I 


AAD 


aad 


88/86 

286 

386 

486 


60 

14 

19 

14 
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AAM 

ASCII Adjust after Multiply 


0 

D 

I 

T 

S 

Z 

A 

P 

C 

7 




± 

± 

7 

± 

7 


Converts an 8-bit binary number less than 100 decimal in AL to an 
unpacked BCD number in AX. The most significant digit goes in AH 
and the least significant in AL. This instruction is often used to adjust 
the product after a MUL instruction that multiplies unpacked BCD 
digits in AH and AL. It is also used to adjust the quotient after a DIV 
instruction that divides a binary number less than 100 decimal in AX 
by an unpacked BCD number. 


| I 1010100 I I (HUM)!.~1 


AAM 


88/86 

286 

386 

486 


83 

16 

17 

15 


AAS 

ASCII Adjust 
after Subtraction 


O 

D 

I 

T 

S 

z 

A 

P 

c 

7 




9 

*> 

+ 

9 

+ 


Adjusts the result of a subtraction to a decimal digit (0-9). The 
previous subtraction instruction should place its 8-bit result in AL. If 
the result is greater than 9h, AH is decremented and the carry and 
auxiliary carry flags are set. Otherwise, the carry and auxiliary carry 
flags are cleared. 


I 'HHIIIII I 


AAS 


aas 


88/86 

286 

386 

486 
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ADC 

Add with Carry 


± ± ± ± ± ± 


Adds the source operand, the destination operand, and the value of the 
carry flag. The result is assigned to the destination operand. This 
instruction is used to add the more significant portions of numbers that 
must be added in multiple registers. 


| 00010(W» ~1 I mod.reg.n »i~| disp (0,1, or2) 


ADC reg.reg 

adc dx,cx 

88/86 3 

286 2 

386 2 

486 1 

ADC mem.reg 

adc WORD PTR m32[2],dx 

88/86 16+EA (W88=24+EA) 

286 7 

386 7 

486 3 

ADC reg,mem 

adc dx,WORD PTR m32[2J 

88/86 9+EA (W88=13+EA) 
286 7 

386 6 

486 2 


| 1 ()()()()()\n ~~| | mod, 01(V//>r~l disp (0.1. or 2) data (lor 2) 


ADC reg.immed 

adc dx, 12 

88/86 

286 

386 

486 

4 

3 

2 

1 

ADC mem.immed 

adc WORD PTR m32[2],16 

88/86 

17+EA (W88=23+EA) 



286 

7 



386 

7 



486 

3 

1 OOOIOlOw | data (1 or 2) 

ADC accum.immed 

adc ax, 5 

88/86 

4 



286 

3 



386 

2 



486 

1 
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ADD 

Add 


o 

D 

I 

T 

S 

Z 

A 

P 

C 

± 




± 

± 

± 

± 

± 


Adds the source and destination operands and puts the sum in the 
destination operand. 


1 OOOOOCW I I mod.reji.rlm ~| disp (0.1. or2) 


ADD reg.reg 

add ax,bx 

88/86 3 

286 2 

386 2 

486 1 

ADD mem.reg 

add total,cx 

add array[bx+di],dx 

88/86 16+EA (W88=24+EA) 

286 7 

386 7 

486 3 

ADD reg.mem 

add cx,incr 
add dx,[bp+6] 

88/86 9+EA (W88=13+EA) 
286 7 

386 6 

486 2 


| HXXXXW ~~| | mod. 000, /»7~l disp (0.1. or 2) data (1 or 2) 


ADD reg.immed 

add bx, 6 

88/86 4 

286 3 

386 2 

486 1 

ADD mem.immed 

add amount,27 

add pointers[bx][si], 6 

88/86 17+EA (W88=23+EA) 

286 7 

386 7 

486 3 


ADD am 


286 

386 

486 
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AND 

Logical AND 


0 

D 

I 

T 

S 

Z 

A 

P 

C 

0 




± 

± 

? 

± 

0 


Performs a bitwise AND operation on the source and destination 
operands and stores the result in the destination operand. For each bit 
position in the operands, if both bits are set, the corresponding bit of 
the result is set. Otherwise, the corresponding bit of the result is 
cleared. 


| OOHKXMv 1 | nwd.res.rlm 1 disp (0.1. or 2) 


and dx,bx 


and bitmask,bx 
and [bp+2],dx 


88/86 16+EA (W88=24+EA) 


and bx,masker 

and dx,marray[bx+di] 


88/86 9+EA (W88=13+EA) 


| lOOOOOui *| | mud. 100, rlni ~| disp (0. 1. or 2) 


AND re Rimmed 


and dx,0F7h 


AND mem.immed 


and masker, 1001b 


88/86 17+EA (W88=23+EA) 


| OOlOOlOtv | data (1 or 2) 


AND accum.immed and ax, 0B6h 
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ARPL 

Adjust Requested 
Privilege Level 
80286-80486 Protected Only 


OD1 TSZAPC 


Verifies that the destination Requested Privilege Level (RPL) field (bits 
0 and 1 of a selector value) is less than the source RPL field. If it is 
not, ARPL adjusts the destination RPL up to match the source RPL. 
The destination operand should be a 16-bit memory or register operand 
containing the value of a selector. The source operand should be a 
16-bit register containing the test value. The zero flag is set if the 
destination is adjusted; otherwise, the flag is cleared. ARPL is useful 
only in 80286-80486 protected mode. See Intel documentation for 
details on selectors and privilege levels. 


| 01100011 1 1 moa 

Ireg.r/m \ disp(0.1 .or2) 



ARPL reg.reg 

arpl ax,cx 

88/86 

— 



286 

10 



386 

20 



486 

9 

ARPL mem,reg 

arpl selector, dx 

88/86 




286 

11 



386 

21 



486 

9 
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ODI TSZAPC 


BOUND 

Check Array Bounds 

80186-80486 Only 


Verifies that a signed index value is within the bounds of an array. The 
destination operand can be any 16-bit register containing the index to 
be checked. The source operand must then be a 32-bit memory operand 
in which the low and high words contain the starting and ending 
values, respectively, of the array. (On the 80386/486 processors, the 
destination operand can be a 32-bit register; in this case, the source 
operand must be a 64-bit operand made up of 32-bit bounds.) If the 
source operand is less than the first bound or greater than the last 
bound, an interrupt 5 is generated. The instruction pointer pushed by 
the interrupt (and returned by IRET) points to the BOUND instruction 
rather than to the next instruction. 


| 01100010 1 1 mod 

■reg , rim \ disp (2) 


BOUND reg!6.mem32 

bound di,base-4 

88/86 

BOUND reg32.mem64* 


286 noj=13t 



386 noj=10t 



486 noj=7 


* 80386/486 only. 

t See INT for timings if interrupt 5 is called. 
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BSF/BSR 

Bit Scan 

80386/486 Only 


O D 


L S Z 4 P C 


Scans an operand to find the first set bit. If a set bit is found, the zero 
flag is set and the destination operand is loaded with the bit index of the 
first set bit encountered. If no set bit is found, the zero flag is cleared. 
BSF (Bit Scan Forward) scans from bit 0 to the most significant bit. 
BSR (Bit Scan Reverse) scans from the most significant bit of an 
operand to bit 0. 



disp (0,1,2. or 4) 

| 00001111 1 1 10111100 1 1 mod, reg. rim \ 


BSF regl6,regl6 

BSF reg32,reg32 

bsf cx,bx 

88/86 - 
286 — 

386 10+3n* 

486 6-42t 

BSF regl6,meml6 

BSF reg32,mem32 

bsf ecx,bitmask 

88/86 

286 — 

386 10+3n* 

486 7-43§ 


disp (0,1,2, or 4) 

| 00001111 | | 10111101 | \ mod.reg.nm \ 


BSR regI6,regJ6 

BSR reg32.reg32 

bsr cx,dx 

88/86 - 
286 — 

386 10+3n* 

486 103 - 3n# 

BSR reg 16,mem 16 

BSR reg32jnem32 

bsr eax,bitmask 

88/86 — 

286 — 

386 10+3n* 

486 104 -3n# 


n = bit position from 0 to 31 
clocks = 6 if second operand equals 0 


t Clocks = 8 + 

4 for each byte scanned + 

3 for each nibble scanned + 

3 for each bit scanned in last nibble 
or 6 if second operand equals 0 


§ Same as footnote above, but add I clock. 


# n = bit position from 0 to 31 
clocks = 7 if second operand equals 0 
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0 

D 

I 

T 

S 

z 

A 

P 

c 

BSWAP 

Byte Swap 
80486 Only 

it as operand and exchanges the first byte 

Dnd byte with the third. This instruction 
s within the bytes and is useful for quickly 
unily byte storage and storage schemes in 
;d first. 










Takes a single 32-bit registi 
with the fourth and the sec< 
does not alter any bit value 
translating between 8086-ft 
which the high byte is ston 



| 0000111I 1 1 11001 reg | 


BSWAP reg32 

bswap ebx 

88/86 - 
286 — 

386 — 

486 1 
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BT/BTC/BTR/BTS 

Bit Tests 

80386/486 Only 


o 

D 

I 

T 

S 

Z 

A 

P 

C 









± 


Copies the value of a specified bit into the carry flag, where it can be 
tested by a JC or JNC instruction. The destination operand specifies 
the value in which the bit is located; the source operand specifies the 
bit position. BT simply copies the bit to the flag. BTC copies the bit 
and complements (toggles) it in the destination. BTR copies the bit 
and resets (clears) it in the destination. BTS copies the bit and sets it in 
the destination. 





disp (0,1.2, or 4) 

data(l) 

| 00001111 1 1 10111010 

_ | \ mod. BBB*.rim \ 




BT regl6.immed8i 

bt 

ax, 4 

88/86 

— 





286 

— 





386 

3 





486 

3 


BTC regl6.immed8f 

bts 

ax, 4 

88/86 



BTR regl6,immed8 1 

btr 

bx, 17 

286 

— 


BTS regld.immedSf 

btc 

edi, 4 

386 

6 





486 

6 


BT meml6.immed8f 

btr 

DWORD PTR [si],27 

88/86 




btc 

color[di],4 

286 

— 





386 

6 





486 

3 


BTC meml6,immed8i 

btc 

DWORD PTR [bx],27 

88/86 



BTR memI6,immed8'\ 

btc 

maskit,4 

286 

— 


BTS mem!6,immed8 1 

btr 

color[di],4 

386 

8 





486 

8 








| 00001 111 | | lOfififiOlC 

■ 1 i ""’</•—— i 

disp (0.1,2. or 4) 








BT reg!6,regl6-\ 

bt 

ax,bx 

88/86 






286 

— 





386 

3 





486 

3 


BTC reg!6,regl6i 

btc 

eax,ebx 

88/86 



BTR regl6,regl6i 

bts 

bx, ax 

286 

— 


BTS regl6,regl 6t 

btr 

cx,di 

386 

6 





486 

6 


BT meml6,regl6 1 

bt 

[bx],dx 

88/86 






286 

— 





386 

12 





486 

8 


BTC memI6,regI6i 

bts 

flags[bx],cx 

88/86 



BTR mcm/6,rcj?/6t 

btr 

rotate,cx 

286 

— 


BTS meml6,regl6f 

btc 

[bp+8],si 

386 

13 





486 

13 



* BBB is 100 for BT, 111 for BTC, 110 for BTR, and 101 lor BTS. 
t Operands can also be 32 bits (reg32 and mem32). 
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CALL 

Call Procedure 


T S Z A P C 


Calls a procedure. The instruction pushes the address of the next 
instruction onto the stack and jumps to the address specified by the 
operand. For NEAR calls, SP is decreased by 2, the offset (IP) is 
pushed, and the new offset is loaded into IP. 

For FAR calls, SP is decreased by 2, the segment (CS) is pushed, and 
the new segment is loaded into CS. Then SP is decreased by 2 again, 
the offset (IP) is pushed, and the new offset is loaded into IP. A 
subsequent RET instruction can pop the address so that execution 
continues with the instruction following the call. 


I 111010(10 1 disp (2) 


CALL label 

call upcase 

88/86 

19(88=23) 



286 

7+m 



386 

7+m 



486 

3 


I 1001 nun 1 disp (4) 


CALL label 

call FAR PTR job 

88/86 

28(88=36) 


call distant 

286 

13+m,pm=26+m* 



386 

17+m,pm=34+m* 



486 

18,pm=20* 


| 11111111 | | ,w.oio,/^~| 


CALL reg 

call 

ax 

88/86 

286 

386 

486 

16(88=20) 

7+m 

7+m 

5 

CALL mem 16 

call 

pointer 

88/86 

21+EA (88=29+EA) 

CALL mem32f 

call 

[bx] 

286 

11+m 




386 

10+m 




486 

5 


| W.OI l.r/iT"! 


CALL mend2 

call far_table[di] 

88/86 

37+EA (88=53+EA) 

CALL mem48t 

call DWORD PTR [bx] 

286 

l6+m,pm=29+m* 



386 

22+m,pm=38+m* 



486 

17,pm=20* 


* Timings for calls through call and task gates are not shown, since they are used primarily in 
pperating systems. 

t 80386/486 32-bit addressing mode only. 
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CBW 

Convert Byte to Word 


ODI TSZAPC 


Converts a signed byte in AL to a signed word in AX by extending the 
sign bit of AL into all bits of AH. 


| 11)01 1000* I 


CBW 


cbw 


88/86 

286 

386 

486 


CBW and CWDE have the same encoding with two exceptions: in 32-bit mode CBW is preceded by 
the operand-size byte (66h) but CWDE is not; in 16-bit mode CWDE is preceded by the operand-size 
byte but CBW is not. 


CDQ 

Convert Double to Quad 

80386/486 Only 


0 

D 

I 

T 

S 

Z 

A 

P 

C 











Converts the signed doubleword in EAX to a signed quadword in the 
EDX:EAX register pair by extending the sign bit of EAX into all bits 
of EDX. 




| 10011001* 1 


CDQ 

cdq 

88/86 — 

286 — 

386 2 

486 3 


CWD and CDQ have the same encoding with lwo exceptions: in 32-bit mode CWD is preceded by the 
operand-size byte (66h) but CDQ is not; in 16-bit mode CDQ is preceded by the operand-size byte 
but CWD is not. 
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CLC 

Clear Carry Flag 


0 

D 

1 

T 

S 

z 

A 

P 

C 









0 


Clears the carry flag. 



Clears the direction flag. All subsequent string instructions will 
process up (from low addresses to high addresses) by increasing the 
appropriate index registers. 


CLD 




88/86 

286 

386 

486 


2 

2 

2 

2 
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CLI 

Clear Interrupt Flag 


0 

D 

1 

T 

S 

Z 

A 

P 

C 



0 








Clears the interrupt flag. When the interrupt flag is cleared, maskable 
interrupts are not recognized until the flag is set again with the STI 
instruction. In protected mode, CLI only clears the flag if the current 
task’s privilege level is less than or equal to the value of the IOPL 
flag. Otherwise, a general-protection fault occurs. 


| 11111010 I 




88/86 

286 

386 

486 
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ODI TSZAPC 


CLTS 

Clear Task Switched Flag 

80286-80486 Privileged Only 


Clears the task switched flag in the Machine Status Word (MSW) of 
the 80286 or the CRO register of the 80386/486. This instruction can 
be used only in systems software executing at privilege level 0. See 
Intel documentation for details on the task-switched flag and other 
privileged-mode concepts. 


| 00001111 I I 00000110 I 


CLTS 




88/86 

286 

386 

486 


o 

D 

I 

T 

S 

Z 

A 

P 

C 









± 


CMC 

Complement Carry Flag 


Complements (toggles) the carry flag. 


i mm i 


CMC 


88/86 

286 

386 

486 


2 

2 

2 
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CMP 

Compare Two Operands 


i j pTp Tjs] /, i ■ < 

± ± ± ± ± ± 


Compares two operands as a test for a subsequent conditional-jump or 
set instruction. CMP does this by subtracting the source operand from 
the destination operand and setting the flags according to the result. 
CMP is the same as the SUB instruction, except that the result is not 
stored. 


| 0011 lOrfw | 1 mod 

„,r. 

' | disp (0,1 .or2) 



CMP reg.reg 

cmp 

di,bx 

88/86 

3 


cmp 

dl,cl 

286 

2 




386 

2 




486 

1 

CMP mem.reg 

cmp 

maximum,dx 

88/86 

9+EA (W88=13+EA) 


cmp 

array[si],bl 

286 

7 




386 

5 




486 

2 

CMP reg.mem 

cmp 

dx,minimum 

88/86 

9+EA (W88=13+EA) 


cmp 

bh,array[si] 

286 

6 




386 

6 




486 

2 

| KXXXXW | | mod 


| disp (0,1, or 2) 

data (1 o 

r 2) 

CMP reg.immed 

cmp 

ax, 24 

88/86 

4 




286 

3 




386 

2 




486 

1 

CMP mem.immed 

cmp 

WORD PTR [di],4 

88/86 

10+EA (W88=14+EA) 


cmp 

tester,4000 

286 

6 




386 

5 




486 

2 

| 00111 10h- | data (lor 2) 

CMP accum.immed 

cmp 

ax,1000 

88/86 

4 




286 

3 




386 

2 




486 

> 
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± 




± 

± 

+ 

+ 

± 


CMPS/CMPSB/ 

CMPSW/CMPSD 

Compare String 


Compares two strings. DS:SI must point to the source string and 
ES:DI must point to the destination string (even if operands are given). 
For each comparison, the destination element is subtracted from the 
source element and the flags are updated to reflect the result (although 
the result is not stored). DI and SI are adjusted according to the size of 
the operands and the status of the direction flag. They are increased if 
the direction flag has been cleared with CLD or decreased if the 
direction flag has been set with STD. 

If the CMPS form of the instruction is used, operands must be 
provided to indicate the size of the data elements to be processed. A 
segment override can be given for the source (but not for the 
destination). If CMPSB (bytes), CMPSW (words), or CMPSD 
(doublewords on the 80386/486 only) is used, the instruction 
determines the size of the data elements to be processed. 

CMPS and its variations are normally used with repeat prefixes. 
REPNE (or REPNZ) is used to find the first match between two 
strings. REPE (or REPZ) is used to find the first nonmatch. Before the 
comparison, CX should contain the maximum number of elements to 
compare. After a REPNE CMPS, the zero flag will be cleared if no 
match was found. After a REPE CMPS, the zero flag will be set if no 
nonmatch was found. Otherwise, SI and DI will point to the element 
after the first match or nonmatch. 


| 101001 lw I 

CMPS src, ||ES:J dest 

CMPSB I src, IES:[ dest] 

CMPSW I Uegreg:] src, JES:I dest 1 
CMPSD | src, fES:H dest] 

cmps source.es:dest 
repne cmpsw 
repe cmpsb 
repne cmpsd 

88/86 22 (W88=30) 

286 8 

386 10 

486 8 


PROCESSOR INSTRUCTIONS 83 






















CMPXCHG 

Compare and Exchange 
80486 Only 


o 

D 

I 

T 

S 

z 

A 

P 

C 

± 




+ 

+ 

+ 

+ 

+ 


Compares the destination operand to the accumulator (AL, AX, or 
EAX). If equal, the source operand is copied to the destination. 
Otherwise, the destination is copied to the accumulator. The instruction 
sets flags according to the result of the comparison. 





| 0000! Ill | | 1011000b | \ mod, reg, rim \ 

disp (0,1, or 2) 




CMPXCHG mem.reg 

cmpxchg warr(bx],cx 
cmpxchg string,bl 

88/86 - 
286 — 

386 — 

486 7-10 

CMPXCHG reg.reg 

cmpxchg dl,cl 
cmpxchg bx, dx 

88/86 

286 — 

386 — 

486 6 


CWD 

Convert Word to Double 


ODI TSZAPC 


Converts the signed word in AX to a signed doubleword in the DX:AX 
register pair by extending the sign bit of AX into all bits of DX. 


CWD 




88/86 

286 


486 


2 

3 


CWD and CDQ have the same encoding wilh two exceptions: in 32-bit mode CWD is preceded by the 
operand-size byte (66h) but CDQ is not: in 16-bit mode CDQ is preceded by the operand-size byte 
but CWD is not. 
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ODI TSZAPC 


CWDE 

Convert Word to 
Extended Double 
80386/486 Only 


Converts a signed word in AX to a signed doubleword in EAX by 
extending the sign bit of AX into all bits of EAX. 


386 3 

486 3 


CBW and CWDE have the same encoding with two exceptions: in 32-bit mode CBW is preceded by 
the operand-size byte (66h) but CWDE is not; in 16-bit mode CWDE is preceded by the operand-size 
byte but CBW is not. 


? ± ± ± ± ± 


DAA 

Decimal Adjust after Addition 


Adjusts the result of an addition to a packed BCD number (less than 
100 decimal). The previous addition instruction should place its 8-bit 
binary sum in AL. DAA converts this binary sum to packed BCD 
format with the least significant decimal digit in the lower four bits and 
the most significant digit in the upper four bits. If the sum is greater 
than 99h after adjustment, the carry and auxiliary carry flags are set. 
Otherwise, the carry and auxiliary carry flags are cleared. 


| 01)1(10111 I 


DAA 


88/86 

286 

386 

486 


3 

4 
2 
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DAS 

Decimal Adjust 
after Subtraction 


o 

D 

I 

T 

S 

Z 

A 

P 

C 

? 




± 

± 

+ 

± 

± 


Adjusts the result of a subtraction to a packed BCD number (less than 
100 decimal). The previous subtraction instruction should place its 
8-bit binary result in AL. DAS converts this binary sum to packed 
BCD format with the least significant decimal digit in the lower four 
bits and the most significant digit in the upper four bits. If the sum is 
greater than 99h after adjustment, the carry and auxiliary carry flags are 
set. Otherwise, the carry and auxiliary carry flags are cleared. 



Subtracts 1 from the destination operand. Because the operand is treated 
as an unsigned integer, the DEC instruction does not affect the carry 
flag. To detect any effects on the carry flag, use the SUB instruction. 


1 llllllltv 1 

| mod. 001 .rim \ diso (0.1. or 2) 



DEC reg8 


dec cl 

88/86 

3 




286 

2 




386 

2 




486 

1 

DEC mem 


dec counter 

88/86 

15+EA (W88=23+EA) 




286 

7 




386 

6 




486 

3 

| 01001 reg 1 

DEC reglb 


dec ax 

88/86 

3 

DEC reg32* 



286 

2 




386 

2 




486 

1 


* 80386/486 only. 
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DIV 

Unsigned Divide 


0__DJ_2__S__Z_A_P__C_ 

? ? ? ? 7 7 


Divides an implied destination operand by a specified source operand. 
Both operands are treated as unsigned numbers. If the source (divisor) is 
16 bits wide, the implied destination (dividend) is the DX:AX register 
pair. The quotient goes into AX and the remainder into DX. If the 
source is 8 bits wide, the implied destination operand is AX. The 
quotient goes into AL and the remainder into AH. On the 80386/486, 
if the source is EAX, the quotient goes into EAX and the divisor into 
EDX. 





| 1111011 w I 1 mod 

,110 .rim | disD (0.1 .or 2) 


DIV reg 

div dl 

88/86 b=80-90,w=144-162 

286 b=14,w=22 

386 b=14,w=22,d=38 

486 b=16,w=24,d=40 

DIV mem 

div [bx] 

div fsize 

88/86 (b=86-96, w= 150-168)+EA * 
286 b=17,w=25 

386 b=17,w=25,d=41 

486 b=16,w=24,d=40 


* Word memory operands on the 8088 take (158-176)+EA clocks. 
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ENTER 

Make Stack Frame 

80186-80486 Only 


o 

D 

1 

T 

S 

Z 

A 

P 

C 











Creates a stack frame for a procedure that receives parameters passed on 
the stack. When immedl6 is 0, ENTER is equivalent to push bp, 
followed by mov bp, sp. The first operand of the ENTER 
instruction specifies the number of bytes to reserve for local variables. 
The second operand specifies the nesting level for the procedure. The 
nesting level should be 0 for languages that do not allow access to 
local variables of higher-level procedures (such as C, Basic, and 
FORTRAN). See the complementary instruction LEAVE for a method 
of exiting from a procedure. 


| 11001000 1 

data (2) data(l) 



ENTER immedl6fi 


enter 4,0 

88/86 





286 

11 




386 

10 




486 

14 

ENTER immedl6 ,1 


enter 0,1 

88/86 

— 




286 

15 




386 

12 




486 

17 

ENTER immedI6,immed8 

enter 6,4 

88/86 





286 

12+4(n - 1) 




386 

15+4(n- 1) 




486 

17+3n 
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HLT 

Halt 


0 

D 

I 

T 

S 

Z 

A 

P 

C 











Stops CPU execution until an interrupt restarts execution at the 
instruction following HLT. In protected mode, this instruction works 
only in privileged mode. 


IDIV 

Signed Divide 


ODI TSZAPC 


Divides an implied destination operand by a specified source operand. 
Both operands are treated as signed numbers. If the source (divisor) is 
16 bits wide, the implied destination (dividend) is the DX:AX register 
pair. The quotient goes into AX and the remainder into DX. If the 
source is 8 bits wide, the implied destination is AX. The quotient goes 
into AL and the remainder into AH. On the 80386/486, if the source is 
EAX, the quotient goes into EAX and the divisor into EDX. 




| 1111011m' | | mod.XW.rlm \ disp (0. !. or 2) 


IDIV reg 

div dl 

88/86 b= 101—112,w=165-184 

286 b= 17,w=25 

386 b=19,w=27.d=43 

486 b=19,w=27,d=43 

IDIV mem 

idiv itemp 

88/86 (b= 107-118,w=171-190)+EA* 
286 b=20,w=28 

386 b=22.w=30.d=46 

486 b=20,w=28,d=44 


* Word memory operands on the 8088 take (175-194)+EA clocks. 
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IMUL 

Signed Multiply 


0 

D 

1 

T 

S 

Z 
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C 

± 




? 

7 

7 

? 

± 


Multiplies an implied destination operand by a specified source 
operand. Both operands are treated as signed numbers. If a single 16-bit 
operand is given, the implied destination is AX and the product goes 
into the DX:AX register pair. If a single 8-bit operand is given, the 
implied destination is AL and the product goes into AX. On the 
80386/486, if the operand is EAX, the product goes into the 
EDX:EAX register pair. The carry and overflow flags are set if the 
product is sign-extended into DX for 16-bit operands, into AH for 8-bit 
operands, or into EDX for 32-bit operands. 

Two additional syntaxes are available on the 80186-80486 processors. 
In the two-operand form, a 16-bit register gives one of the factors and 
serves as the destination for the result; a source constant specifies the 
other factor. In the three-operand form, the first operand is a 16-bit 
register where the result will be stored, the second is a 16-bit register or 
memory operand containing one of the factors, and the third is a 
constant representing the other factor. With both variations, the 
overflow and carry flags are set if the result is too large to fit into the 
16-bit destination register. Since the low 16 bits of the product are the 
same for both signed and unsigned multiplication, these syntaxes can 
be used for either signed or unsigned numbers. On the 80386/486, the 
operands can be either 16 or 32 bits wide. 

A fourth syntax is available on the 80386/486. Both the source and 
destination operands can be given specifically. The source can be any 
16- or 32-bit memory operand or general-purpose register. The 
destination can be any general-purpose register of the same size. The 
overflow and carry flags are set if the product does not fit in the 
destination. 




| HIIOllw | | mod. 101 .rim | diso (0.1. or 2) 


IMUL reg 

imul dx 

88/86 b=80-98, w= 128-154 

286 b=!3,w=21 

386 b=9-l4,w=9-22,d=9-38* 

486 b= 13— 18,w= 13-26,d= 13-42 

IMUL mem 

imul factor 

88/86 (b=86-104,w= 134— 160)+EAt 

286 b=16,w=24 

386 b= 12-17,w= 12-25,d= 12-41 * 
486 b= 13-18,w= 13-26, d= 13-42 


* The 80386/486 processors have an early-out multiplication algorithm. Therefore, multiplying an 
8-bit or 16-bit value in EAX takes the same lime as multiplying the value in AL or AX. 
t Word memory operands on the 8088 take (138-164)+EA clocks. 


CONTINUED... 
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data (I or 2) 

| 011010sl 1 \ mod. reg. r/m \ disp (0,1. or 2) 


IMUL reglb.immed 

IMUL reg32,immed* 

imul cx, 25 

88/86 — 

286 21 

386 b=9-14,w=9-22,d=9-38t 

486 b= 13—18,w= 13-26,d= 13-42 

IMUL regl6.regI6.immed 
IMUL reg32,reg32.immed* 

imul dx,ax,18 

88/86 

2X6 21 

386 b=9-14,w=9-22,d=9-38t 

486 b= 13-18,w= 13-26,d= 13-42 

IMUL regl6,memI6,immed 
IMUL reg32,mem32.immed* 

imul bx, [si], 60 

88/86 

2X6 24 

386 b= 12— 17,w=l 2-25,d= 12-411 
486 b= 13— 18,w= 13-26,d= 13-42 


disp (0,1, or 2) 

| 00001111 | | 10101111 | | mod.reg.rlm \ 


IMUL regl6.reg!6 

IMUL reg32.reg32* 


88/86 

2X6 _ 

386 w=9-22,d=9~38 

486 b= 13-18,w= 13-26,d= 13-42 

IMUL reg!6.meml6 

IMUL reg32.mem32* 

imul dx,[si] 

88/86 — 

286 — 

386 w= 12-25 ,d= 12-41 

486 b= 13—18,w-13-26,d= 13-42 


* 80386/486 only. 

t The variations depend on the source constant size; destination size is not a factor. 
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IN 

Input from Port 


ODI TSZAPC 


Transfers a byte or word (or doubleword on the 80386/486) from a port 
to the accumulator register. The port address is specified by the source 
operand, which can be DX or an 8-bit constant. Constants can only be 
used for port numbers less than 255; use DX for higher port numbers. 
In protected mode, a general-protection fault occurs if IN is used when 
the current privilege level is greater than the value of the IOPL flag. 



* First protected-mode timing: CPL < IOPL. Second timing: CPL > IOPL. 
t Takes 27 clocks in virtual 8086 mode. 
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INC 

Increment 


o__Dj_jr_s__z_A_p._c_ 

± ± ± ± ± 


Adds 1 to the destination operand. Because the operand is treated as an 
unsigned integer, the INC instruction does not affect the carry flag. If a 
signed carry requires detection, use the ADD instruction. 



* 80386/486 only. 
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INS/I NSB/I NS W/INSD 

Input from Port to String 

80186-80486 Only 
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Receives a string from a port. The string is considered the destination 
and must be pointed to by ES:DI (even if an operand is given). The 
input port is specified in DX. For each element received, DI is adjusted 
according to the size of the operand and the status of the direction flag. 
DI is increased if the direction flag has been cleared with CLD or 
decreased if the direction flag has been set with STD. 

If the INS form of the instruction is used, a destination operand must 
be provided to indicate the size of the data elements to be processed and 
DX must be specified as the source operand containing the port 
number. A segment override is not allowed. If INSB (bytes), INSW 
(words), or INSD (doublewords on the 80386/486 only) is used, the 
instruction determines the size of the data elements to be received. 

INS and its variations are normally used with the REP prefix. Before 
the repeated instruction is executed, CX should contain the number of 
elements to be received. In protected mode, a general-protection fault 
occurs if INS is used when the current privilege level is greater than 
the value of the IOPL flag. 


| 0110110m- I 

INS [ES:J dest, DX 

ins es:instr,dx 

88/86 

— 

INSB I |ES:D dest, DX| 

rep insb 

286 

5 

INSW [ IES:] dest, DXJ 

rep insw 

386 

15,pm=9,29* 

INSD I |ES:J dest, DX] 

rep insd 

486 

I7,pm=10,32* 


* First protected-mode timing: CPL < IOPL. Second timing: CPL > IOPL. 
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INT 

Interrupt 


Generates a software interrupt. An 8-bit constant operand (0 to 255) 
specifies the interrupt procedure to be called. The call is made by 
indexing the interrupt number into the Interrupt Descriptor Table (IDT) 
starting at segment 0, offset 0. In real mode, the IDT contains 4-byte 
pointers to interrupt procedures. In privileged mode, the IDT contains 
8-byte pointers. 

When an interrupt is called in real mode, the flags, CS, and IP are 
pushed onto the stack (in that order) and the trap and interrupt flags are 
cleared. STI can be used to restore interrupts. See Intel documentation 
and the documentation for your operating system for details on using 
and defining interrupts in privileged mode. To return from an interrupt, 
use the IRET instruction. 


1 11001101 1 data(i) 

INT immed8 

int 25h 

88/86 51 (88=71) 

286 23+m,pm=(40,78)+m* 

386 37,pm=59,99* 

486 30,pm=44,71* 

| 11001100 | 

INT 3 

int 3 

88/86 52 (88=72) 

286 23+m,pm=(40,78)+m* 

386 33,pm=59,99* 

486 26,pm=44,71 * 


The first protected-mode timing is for interrupts to the same privilege level. The second is for 
interrupts to a higher privilegelevel. Timings for interrupts through task gates are not shown. 
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INTO 

Interrupt on Overflow 


Generates interrupt 4 if the overflow flag is set. The default DOS 
behavior for interrupt 4 is to return without taking any action. You 
must define an interrupt procedure for interrupt 4 in order for INTO to 
have any effect. 


| 11001110 I 

INTO 


88/86 53 (88=73 ).noj=4 

286 24+m,noj=3.pm=(40,78)+m* 

386 35,noj=3.pm=59,99* 

486 28,noj=3,pm=46.73* 


The first protected-mode timing is for interrupts to the same privilege level. The second is for 
interrupts to a higher privilege level. Timings for interrupts through task gates are not shown. 


IN VD 

Invalidate Data Cache 

80486 Only 


OD1 TSZAPC 


Empties contents of the current data cache without writing changes to 
memory. Proper use of this instruction requires knowledge of how 
contents are placed in the cache. INVD is intended primarily for 
systems programming. See Intel documentation for details. 


| OIKHII I I I I I OO(K)I()(K) I 


INVD 




88/86 

286 

386 

486 
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ODI TSZAPC 


INVLPG 

Invalidate TLB Entry 
80486 Only 


Invalidates an entry in the Translation Lookaside Buffer (TLB), used by 
the demand-paging mechanism for OS/2 and other virtual-memory 
systems. The instruction takes a single memory operand and calculates 
the effective address of the operand, including the segment address. If 
the resulting address is mapped by any entry in the TLB, this entry is 
removed. Proper use of INVLPG requires understanding the hardware- 
supported demand-paging mechanism. INVLPG is intended primarily 
for systems programming. See Intel documentation for details. 







| 00001111 1 

| 00000001 1 

| mod. reg. rim \ 

disp (2) 






INVLPG 

invlpg 

invlpg 

pointer[bx] 

88/86 

286 — 

386 — 

486 12* 


* 11 clocks if address is not mapped by any TLB entry. 


IRET/IRETD 

Interrupt Return 


0 

D 
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A 

P 

C 

+ 

+ 

+ 

+ 

+ 

+ 

+ 

± 

+ 


Returns control from an interrupt procedure to the interrupted code. In 
real mode, the IRET instruction pops IP, CS, and the flags (in that 
order) and resumes execution. See Intel documentation for details on 
IRET operation in privileged mode. On the 80386/486, the IRETD 
instruction should be used to pop a 32-bit instruction pointer when 
returning from an interrupt called from a 32-bit segment. The F suffix 
prevents epilogue code from being generated when ending a PROC 
block. Use it to terminate interrupt service procedures. 


| 11001111 1 

IRET 

iret 

88/86 

32(88=44) 

IRETD* 


286 

17+m,pm=(31,55)+mt 

IRETF 


386 

22,pm=38,82t 

IRETDF* 


486 

15,pm=20,36 


* 80386/486 only. 

t The first protected-mode timing is for interrupts to the same privilege level within a task. The 
second is for interrupts to a higher privilege level within a task. Timings for interrupts through task 
gates are not shown. 
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J condition 

Jump Conditionally 
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Transfers execution to the specified label if the flags condition is true. 
The condition is tested by checking the flags shown in the table on the 
following page. If the condition is false, no jump is taken and program 
execution continues at the next instruction. On the 8086-80286 
processors, the label given as the operand must be short (between -128 
and +127 bytes from the instruction following the jump).* The 
80386/486 processors allow near jumps (-32,768 to +32,767 bytes). 
On the 80386/486, the assembler generates the shortest jump possible, 
unless the jump size is explicitly specified. 

When the 80386/486 processors are in FLAT memory model, short 
jumps range from -128 to +127 bytes and near jumps range from -2 to 
+2 gigabytes. There are no far jumps. 


| 0111 cond 1 

disp(l) 




J condition label 


jg 

bigger 

88/86 

16,noj=4 



jo 

SHORT too_big 

286 

7+m,noj=3 



jpe 

p_even 

386 

7+m,noj=3 





486 

3,noj=l 

| 00001111 | 

lOOOcW 

disp (2) 



J condition label f 


je 

next 

88/86 





lesser 

286 

— 



js 

negative 

386 

7+m,noj=3 





486 

3,noj=l 


* If a source file for an 8086-80286 program contains a conditional jump beyond the ranee of -128 to 
+ 127 bytes, the assembler emits a level 3 warning and generates two instructions (including an 
unconditional jump) that are the equivalent of the desired instruction. This behavior can be enabled 
and disabled with the OPTION LJMP and OPTION NOUMP directives, 
t Near labels are only available on the 80386/486. They are the default. 


CONTINUED... 
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JUMP CONDITIONS 


Opcode 


size (1010 


■w;HK)l I 


size 0110 


size Dili 


size 0100 


size 0101 


size 1100 


size 1101 


size 1110 




size 1000 


size 1001 


size 0010 


s/^OOIl 


size 0000 


size (XX) 1 


size 1010 


size 1011 


Note: The siz 


Mnemonic 

Flags Checked 

Description 

JB/JNAE 

CF=1 

Jump if below/not above or equal 
(unsigned comparisons) 

JAE/JNB 

CF=0 

Jump if above or equal/not below 
(unsigned comparisons) 

JBE/JNA 

CF=1 or ZF= 1 

Jump if below or equal/not above 
(unsigned comparisons) 

JA/JNBE 

CF=0 and ZF=0 

Jump if above/not below or equal 
(unsigned comparisons) 

JE/JZ 

ZF=1 

Jump if equal (zero) 

JNE/JNZ 

ZF=0 

Jump if not equal (not zero) 

JL/JNGE 

SF*OF 

Jump if less/not greater or equal (signed 
comparisons) 

JGE/JNL 

SF=OF 

Jump if greater or equal/not less (signed 
comparisons) 

JLE/JNG 

ZF=1 or SF*OF 

Jump if less or equal/not greater (signed 
comparisons) 

JG/JNLE 

ZF=0 and SF=OF 

Jump if greater/not less or equal (signed 
comparisons) 

JS 

SF=1 

Jump if sign 

JNS 

SF=0 

Jump if not sign 

JC 

CF=1 

Jump if carry 

JNC 

CF=0 

Jump if not carry 

JO 

OF=l 

Jump if overflow 

JNO 

OF=0 

Jump if not overflow 

JP/JPE 

PF=1 

Jump if parity/parity even 

JNP/JPO 

PF=0 

Jump if no parity/parity odd 


e bits arc 0111 for short jumps or 1000 for 80386/486 near jumps. 
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JCXZ/JECXZ 

Jump if CX is Zero 
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Transfers program execution to the specified label if CX is 0. On the 
80386/486, JECXZ can be used to jump if ECX is 0. If the count 
register is not 0, execution continues at the next instruction. The label 
given as the operand must be short (between -128 and +127 bytes from 
the instruction following the jump). 


| 11100011 k disp(l) 

JCXZ label 

JECXZ label* 

jcxz notfound 

88/86 18,noj=6 

286 8+m,noj=4 

386 9+m,noj=5 

486 8,noj=5 


* S0386/486 only. 


JMP 

Jump Unconditionally 


ODl TSZAPC 


Transfers program execution to the address specified by the destination 
operand. Jumps are near (between -32,768 and +32,767 bytes from the 
instruction following the jump), or short (between -128 and +127 
bytes), or far (in a different code segment). Unless a distance is 
explicitly specified, the assembler selects the shortest possible jump. 
With near and short jumps, the operand specifies a new IP address. 

With far jumps, the operand specifies new IP and CS addresses. 

When the 80386/486 processors are in FLAT memory model, short 
jumps range from -128 to +127 bytes and near jumps range from -2 to 
+2 gigabytes. 


CONTINUED... 
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disp (I) 


| iiimoif 

.IMP label 


] 


jmp 


SHORT exit 


286 

386 

486 


15 

7+m 

7+m 


I 111111001 1 disp<2*) 


JMP label 


jmp 

jmp 


88/86 15 

NEAR PTR distant 286 7+m 

386 7+m 

486 3 


I II101010 1 disp (4*) 


JMP label 

jmp FAR PTR close 

88/86 

15 


jmp distant 

286 

1 l+m,pm=23+mf 



386 

12+m,pm=27+mf 



486 

17,pm=19t 


| I 1 I 1 1 I 1 1 | | mi>d, 101).' m~~| disp (0 or 2) 


JMP regl6 

JMP reg32§ 

jmp ax 

88/86 11 

286 7+m 

386 7+m 

486 5 

JMP mem/6 

jmp WORD PTR [bx] 

88/86 18+EA 

JMP mend2^ 

jmp table[di] 

286 11+m 


jmp DWORD PTR [si] 

386 10+m 



486 5 


| I 1 111 I 1 1 | | ;W.10I./-/>T"| disp (4*) 


JMP mend2 

jmp 

fpointer[si] 

88/86 

24+EA 

JMP mem4S§ 

jmp 

DWORD PTR [bx] 

286 

15+m,pm=26+m 


jmp 

FWORD PTR [di] 

386 

12+m,pm=27+m 




486 

13,pm=18 


* On the 80386/486, the displacement can be four bytes for near jumps or six bytes for far jumps, 
t Timings for jumps through call or task gates are not shown, since they are normally used only in 
operating systems. 

§ 80386/486 only. You can use DWORD PTR to specify near register-indirect jumps or FWORD PTR 
to specify far register-indirect jumps. 
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LAHF 

Load Flags into AH Register 
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Transfers bits 0 to 7 of the flags register to AH. This includes the 
carry, parity, auxiliary carry, zero, and sign flags, but not the trap, 
interrupt, direction, or overflow flags. 


LAR 

Load Access Rights 

80286-80486 Protected Only 


0 
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± 





Loads the access rights of a selector into a specified register. The source 
operand must be a register or memory operand containing a selector. 
TTie destination operand must be a register that will receive the access 
rights if the selector is valid and visible at the current privilege level. 
The zero flag is set if the access rights are transferred, or cleared if they 
are not. See Intel documentation for details on selectors, access rights, 
and other privileged-mode concepts. 





| 00001111 1 1 00000010 1 | mod, reg, rim \ 

disp <0,1,2, or 4) 



LAR reg!6,regl6 

LAR reg32,reg32* 


88/86 

286 14 

386 15 

486 11 

LAR regl6,meml6 

LAR reg32,mem32* 

lar cx,selector 

88/86 

286 16 

386 16 

486 II 


* 80386/486 only. 
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ODI TSZAPC 


LDS/LES/LFS/LGS/LSS 

Load Far Pointer 


Reads and stores the far pointer specified by the source memory 
operand. The instruction moves the pointer’s segment value into DS, 
ES, FS, GS, or SS (depending on the instruction). Then it moves the 
pointer’s offset value into the destination operand. The LDS and LES 
instructions are available on all processors. The LFS, LGS, and LSS 
instructions are available only on the 80386/486. 




| 11000101 1 1 mod, reg, rtm \ disp (2) 


LDS reg,mem 

Ids si,fpointer 

88/86 16+EA (88=24+EA) 

286 7,pm=21 

386 7,pm=22 

486 6,pm=12 



| 11000100 | | mod, reg, rim \ disp<2) 


LES reg,mem 

les di,fpointer 

88/86 16+EA (88=24+EA) 

286 7,pm=21 

386 7,pm=22 

486 6,pm=12 


disp (2 or 4) 

| 00001111 | | 10110100 | | mod, reg, rim \ 


LFS reg,mem 

lfs edi,fpointer 

88/86 - 
286 — 

386 7,pm=25 

486 6,pm=12 


disp (2 or 4) 

| 00001111 | | 10110101 | | mod, reg, rim \ 


LGS reg.mem 

lgs bx,fpointer 

88/86 - 
286 — 

386 7.pm=25 

486 6,pm=12 


disp (2 or 4) 

| 00001111 | | 10110010 | | mod. reg, rim \ 


LSS reg.mem 

lss bp,fpointer 

88/86 — 

286 — 

386 7,pm=22 

486 6,pm=12 
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LEA 

Load Effective Address 
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Calculates the effective address (offset) of the source memory operand 
and stores the result in the destination register. 

If the source operand is a direct memory address, the assembler encodes 
the instruction in the more efficient MOV reg,immediate form 
(equivalent to MOV reg, OFFSET mem). 


| 10001101 1 1 mod 

.reg, rim \ disp (2) 


LEA regl6.mem 

lea bx,npointer 

88/86 2+EA 

LEA reg32,mem* 


286 3 



386 2 



486 It 


* 80386/486 only, 
t 2 if index register used. 


LEAVE 

High Level Procedure Exit 

80186-80486 Only 


ODI TSZAPC 


Terminates the stack frame of a procedure. LEAVE reverses the action 
of a previous ENTER instruction by restoring SP and BP to the values 
they had before the procedure stack frame was initialized. LEAVE is 
equivalent to mov sp, bp, followed by pop bp. 


| llooiooi | 


LEAVF. 


386 

486 
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LES/LFS/LGS 

Load Far Pointer to Extra Segment 


See LDS. 


T S 


Z A P C 


LGDT/LIDT/LLDT 

Load Descriptor Table 

80286-80486 Privileged Only 


Loads a value from an operand into a descriptor table register. LGDT 
loads into the Global Descriptor Table, LIDT into the Interrupt 
Descriptor Table, and LLDT into the Local Descriptor Table. These 
instructions are available only in privileged mode. See Intel 
documentation for details on descriptor tables and other protected-mode 
concepts. 



disp (2) 

| 00001111 1 1 00000001 1 1 mod, 010,/Vm | 


LGDT mem48 

lgdt descriptor 

88/86 

286 11 

386 11 

486 11 


disp (2) 

| 00001111 | | 00000001 | | mod, 011 ,r/m \ 


LIDT mem48 

lidt descriptor 

88/86 

286 12 

386 11 

486 11 


disp (0, l,or2) 

| 00001111 | | 00000000 | | mod. 010./7m | 


LLDT re/;16 

lidt ax 

88/86 - 
286 17 

386 20 

486 11 

LLDT mem 16 

lidt selector 

88/86 

286 19 

386 24 

486 11 
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LMSW 

Load Machine Status Word 

80286-80486 Privileged Only 


T S Z A P C 


Loads a value from a memory operand into the Machine Status Word 
(MSW). This instruction is available only in privileged mode. See 
Intel documentation for details on the MSW and other protected-mode 
concepts. 



LOCK 

Lock the Bus 
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Locks out other processors during execution of the next instruction. 
This instruction is a prefix. It must precede an instruction that accesses 
a memory location that another processor might attempt to access at 
the same time. See Intel documentation for details on multiprocessor 
environments. 




| II110000 1 


LOCK instruction 

lock xchg ax,sem 

88/86 2 

286 0 

386 0 

486 1 
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LODS/LODSB/ 

LODSW/LODSD 

Load String Operand 


Loads a string from memory into the accumulator register. The string 
to be loaded is the source and must be pointed to by DS:SI (even if an 
operand is given). For each source element loaded, SI is adjusted 
according to the size of the operands and the status of the direction flag. 
SI is increased if the direction flag has been cleared with CLD or 
decreased if the direction flag has been set with STD. 

If the LODS form of the instruction is used, an operand must be 
provided to indicate the size of the data elements to be processed. A 
segment override can be given. If LODSB (bytes), LODSW (words), or 
LODSD (doublewords on the 80386/486 only) is used, the instruction 
determines the size of the data elements to be processed and whether the 
element will be loaded to AL, AX, or EAX. 

LODS and its variations are not normally used with repeat prefixes, 
since there is no reason to repeatedly load memory values to a register. 


| 1010110m- 1 

LODS src 

LODSB I Isej-i-e.?:! jrc| 
LODSW [ 5/rl 

LODSD IliwwDrrI 

lods es:source 

88/86 12 (W88=16) 

286 5 

386 5 

486 5 
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LOOP/LOOPW/LOOPD 

Loop 


O D I TSZAPC 


Loops repeatedly to a specified label. LOOP decrements CX (without 
changing any flags) and, if the result is not 0, transfers execution to the 
address specified by the operand. On the 80386/486, LOOP uses the 
16-bit CX in 16-bit mode and the 32-bit ECX in 32-bit mode. The 
default can be overridden with LOOPW (CX) or LOOPD (ECX). If CX 
is 0 after being decremented, execution continues at the next 
instruction. The operand must specify a short label (between -128 and 
+ 127 bytes from the instruction following the LOOP instruction). 


1 11100010 | disD(l) 

LOOP label 

LOOPW label* 

LOOPD label* 

loop wend 

88/86 17,noj=5 

286 8+m,noj=4 

386 11+m 

486 7,noj=6 


* 80386/486 only. 
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LOOP condition 
LOOP conditions 
LOOP conditionD 

Loop Conditionally 


Loops repeatedly to a specified label if condition is met and if CX is 
not 0. On the 80386/486, these instructions use the 16-bit CX in 
16-bit mode and the 32-bit ECX in 32-bit mode. This default can be 
overridden with the W (CX) or D (ECX) forms of the instruction. The 
instruction decrements CX (without changing any flags) and tests 
whether the zero flag was set by a previous instruction (such as CMP). 
With LOOPE and LOOPZ (they are synonyms), execution is 
transferred to the label if the zero flag is set and CX is not 0. With 
LOOPNE and LOOPNZ (they are synonyms), execution is transferred 
to the label if the zero flag is cleared and CX is not 0. Execution 
continues at the next instruction if the condition is not met. Before 
entering the loop, CX should be set to the maximum number of 
repetitions desired. 


1 11100001 | disD (1) 

LOOPE label 

LOOPEW label* 

LOOPED label* 

LOOPZ label 

LOOPZW label* 

LOOPZD label* 

loopz again 

88/86 18,noj=6 

286 8+m.noj=4 

386 11+m 

486 9,noj=6 

1 11100000 1 disD(l) 

LOOPNE label 
LOOPNEW label* 
LOOPNED label* 
LOOPNZ label 
LOOPNZW label* 
LOOPNZD label* 

loopnz for_next 

88/86 19,noj=5 

286 8,noj=4 

386 11+m 

486 9,noj=6 


* 80386/486 only. 
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LSL 

Load Segment Limit 

80286-80486 Protected Only 


ODI TSZAPC 


Loads the segment limit of a selector into a specified register. The 
source operand must be a register or memory operand containing a 
selector. The destination operand must be a register that will receive the 
segment limit if the selector is valid and visible at the current privilege 
level. The zero flag is set if the segment limit is transferred, or cleared 
if it is not. See Intel documentation for details on selectors, segment 
limits, and other protected-mode concepts. 



disp (0,1 .or2) 

| 00001111 1 1 00000011 1 1 mod, reg, rim \ 


LSL regl6,regI6 

LSL reg32,reg32* 

lsl ax,bx 

88/86 - 
286 14 

386 20,25t 

486 10 

LSL reg!6.meml6 

LSL reg32,mem32* 

lsl cx,seg_lim 

88/86 

286 16 

386 21,26t 

486 10 


* 80386/486 only. 

t The first value is for byte granular; the second is for page granular. 
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LSS 

Load Far Pointer to Stack Segment 


See LDS. 
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LTR 

Load Task Register 

80286-80486 Privileged Only 


Loads a value from the specified operand to the current task register. 
LTR is available only in privileged mode. See Intel documentation for 
details on task registers and other protected-mode concepts. 





| 00001111 1 1 00000000 | 1 mod, 0l\,r/m | 

disp (0.1, or 2) 



LTR regl6 

ltr ax 

88/86 — 

286 17 

386 23 

486 20 

LTR meml6 

ltr task 

88/86 — 

286 19 

386 27 

486 20 
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MOV 

Move Data 


T S Z A P C 


Moves the value in the source operand to the destination operand. If the 
destination operand is SS, interrupts are disabled until the next 
instruction is executed (except on early versions of the 8088 and 8086). 


| IQOOlOtAr I I mod, reg, rim | disp (0.1. or 2) 


MOV reg,reg 

mov dh,bh 
mov dx,cx 
mov bp,sp 

88/86 2 

286 2 

386 2 

486 1 

MOV mem.reg 

mov array[di],bx 

88/86 9+EA (W88=13+EA) 
286 3 

386 2 

486 1 

MOV reg,mem 

mov bx,pointer 
mov dx,matrix[bx+di] 

88/86 8+EA (W88=12+EA) 
286 5 

386 4 

486 1 


| 110001 Iw | 

| mod. 000, r/m 

| disp (0,1, or 2) 

data (1 o 

r2) 

MOV mem.immed 


mov 

[bx],15 

88/86 

10+EA (W88=I4+EA) 



mov 

color,7 

286 

3 





386 

2 





486 

1 

1 101 lw reg | 

data (1 or 2) 




MOV reg.immed 


mov 

cx,256 

88/86 

4 



mov 

dx,OFFSET string 

286 

2 





386 

2 





486 

1 


I lOlOOOAv | disp (2) 


MOV mem.actum 

mov total,ax 

88/86 

286 

386 

486 

10 (W88=I4) 

3 

2 

1 

MOV accum,mem 

mov al,string 

88/86 

10 (W88=14) 



286 

5 



386 

4 



486 

1 


CONTINUED... 
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| 10001 let) 1 | mod 

sreg, r/m \ disp (0,1 ,or2) 



MOV segreg,regl6 

mov ds,ax 

88/86 

2 



286 

2,pm=17 



386 

2,pm=18 



486 

3,pm=9 

MOV segreg.meml6 

mov es,psp 

88/86 

8+EA (88=12+EA) 



286 

5,pm=19 



386 

5,pm=19 



486 

3,pm=9 

MOV regl6,segreg 

mov ax,ds 

88/86 

2 



286 

2 



386 

2 



486 

3 

MOV meml6,segreg 

mov stack save,ss 

88/86 

9+EA (88=13+EA) 



286 

3 



386 

2 



486 

3 
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MOV 

Move to/from 
Special Registers 
80386/486 Only 
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? 

? 

7 

7 

7 


Moves a value from a special register to or from a 32-bit general- 
purpose register. The special registers include the control registers 
CRO, CR2, and CR3; the debug registers DRO, DR1. DR2, DR3, 
DR6, and DR7; and the test registers TR6 and TR7. On the 80486, the 
test registers TR4, TR5, and TR7 are also available. See Intel 
documentation for details on special registers. 




| 00001 111 | | 00KXXW0 1 1 11 .reg*, rim \ 


MOV reg32. controlreg 

mov eax,cr2 

88/86 - 
286 — 

386 6 

486 4 

MOV controlreg,reg32 

mov crO,ebx 

88/86 — 

286 — 

386 CR0= 10,CR2=4,CR3=5 

486 4,CR0=16 



| 00001111 | | 0OKXXW1 | | 11. reg*. rim \ 


MOV reg32,debugreg 

mov edx,dr3 

88/86 - 
286 — 

386 DR0-3=22,DR6-7=14 

486 10 

MOV debugreg,reg32 

mov dr0,ecx 

88/86 - 
286 — 

386 DR0-3=22,DR6-7=16 

486 11 



| 00001111 | | OOlOOldO | | 11 ,reg*,rlm \ 


MOV reg32,testreg 

mov edx,tr6 

88/86 - 
286 

3X6 12 

486 4,TR3=3 

MOV testreg, reg32 

mov tr7,eax 

88/86 

286 — 

386 12 

486 4,TR3=6 


The reg field contains the register number of the special register (for example. (XX) for CRO, Oil for 
DR7, or 111 for TR7). 
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MOVS/MOVSB/ 

MOVSW/MOVSD 

Move String Data 


Moves a string from one area of memory to another. The source string 
must be pointed to by DS:SI, and the destination address must be 
pointed to by ES:DI (even if operands are given). For each element 
moved. DI and SI are adjusted according to the size of the operands and 
the status of the direction flag. They are increased if the direction flag 
has been cleared with CLD, or decreased if the direction flag has been 
set with STD. 

If the MOVS form of the instruction is used, operands must be 
provided to indicate the size of the data elements to be processed. A 
segment override can be given for the source operand (but not for the 
destination). If MOVSB (bytes), MOVSW (words), or MOVSD 
(doublewords on the 80386/486 only) is used, the instruction 
determines the size of the data elements to be processed. 

MOVS and its variations are normally used with the REP prefix. 


| IOIOOIOu- I 

MOVS |ES:J dest, Isc^rcj?:! src 
MOVSB I|ES:] dest, Isegreg :J src! 
MOVSW ] JES:] dest, Iscgreg:J src! 
MOVSD | JES:D dest, !scj?rc^:l src! 

rep movsb 

movs dest,es:source 

88/86 18 (W88=26) 

286 5 

386 7 

486 7 
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MOVSX 

Move with Sign-Extend 

80386/486 Only 


Moves and sign-extends the value of the source operand to the 
destination register. MOVSX is used to copy a signed 8-bit or 16-bit 
source operand to a larger 16-bit or 32-bit destination register. 





| 00001111 1 1 101111 lw I 1 mod, reg, r/m \ 

disp <0,1,2. or 4) 



MOVSX reg,reg 

movsx eax,bx 
movsx ecx,bl 
movsx bx, al 

88/86 - 
286 — 

386 3 

486 3 

MOVSX reg.mem 

movsx cx,bsign 
movsx edx,wsign 
movsx eax,bsign 

88/86 - 
286 — 

386 6 

486 3 


ODI TSZAPC 


MOVZX 

Move with Zero-Extend 

80386/486 Only 


ODI TSZAPC 


Moves and zero-extends the value of the source operand to the 
destination register. MOVZX is used to copy an unsigned 8-bit or 
16-bit source operand to a larger 16-bit or 32-bit destination register. 







| 00001111 | 

101101 lw 

1 

1 

disp <0.1, 2, or 4) 





MOVZX reg,reg 

“X 

eax,bx 
ecx,bl 
bx, al 

88/86 - 
286 — 

386 3 

486 3 

MOVZX reg,mem 


cx,bunsign 
edX/Wunsign 
eax,bunsign 

88/86 

286 — 

386 6 

486 3 
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MUL 

Unsigned Multiply 


O D 


_L JL ji_i JlH. 

? ? ? ? ± 


Multiplies an implied destination operand by a specified source 
operand. Both operands are treated as unsigned numbers. If a single 
16-bit operand is given, the implied destination is AX and the product 
goes into the DX. AX register pair. If a single 8-bit operand is given, 
the implied destination is AL and the product goes into AX. On the 
80386/486, if the operand is EAX, the product goes into the 
EDX:EAX register pair. The carry and overflow flags are set if DX is 
not 0 for 16-bit operands or if AH is not 0 for 8-bit operands. 


1 llll011 “' 1 E 

. 100,/// 

» | disp (0.1 .or2) 



MUL reg 

mul 

bx 

88/86 

b=70-77,w= 118-133 


mul 

dl 

286 

b=13,w=21 




386 

b=9- 14,w=9-22,d=9-38* 




486 

b= 13-18, w= 13-26,d= 13-42 

MUL mem 

mul 

factor 

88/86 

(b=76-83, w= 124-139)+EAf 


mul 

WORD PTR [bx] 

286 

b=16,w=24 




386 

b=12-17,w= 12-254=12^41* 




486 

b= 13-18. w= 13-264=13^42 


* The 80386/486 processors have an early-out multiplication algorithm. Therefore, multiplying an 
8-bit or 16-bit value in EAX takes the same time as multiplying the value in AL or AX. 
t Word memory operands on the 8088 take (128-I43J+EA clocks. 
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NEG 

Two's Complement Negation 


_o._D_LJL_s__z_i_p__£. 

± ± ± ± ± ± 


Replaces the operand with its two's complement. NEG does this by 
subtracting the operand from 0. If the operand is 0, the carry flag is 
cleared. Otherwise, the carry flag is set. If the operand contains the 
maximum possible negative value (-128 for 8-bit operands or -32,768 
for 16-bit operands), the value does not change, but the overflow and 
carry flags are set. 
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0 D I T S Z A 

p c NOP 


No Ooeration 

Performs no operation. NOP can be used for timing delays or 
alignment. 



| 10010000* 1 


NOP 

nop 88/86 3 

286 3 

386 3 

486 3 


* The encoding is the same as XCHG AX,AX. 


NOT 

One's Complement Negation 


Toggles each bit of the operand by clearing set bits and setting cleared 
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OR 

Inclusive OR 


0 

D 

1 

T 

S 

z 

A 

P 

C 

0 




+ 

+ 

? 

± 

0 


Performs a bitwise OR operation on the source and destination 
operands and stores the result to the destination operand. For each 
bit position in the operands, if either or both bits are set, the 
corresponding bit of the result it set. Otherwise, the corresponding 
bit of the result is cleared. 


| 00001 (Mw 1 I mod. reg, rim ~| disp <0,1, or 2) 


OR reg,reg 

or 

ax,dx 

88/86 

286 

386 

486 

3 

2 

2 

1 

OR mem,reg 

or 

bits,dx 
[bp+6],cx 

88/86 

286 

386 

486 

16+EA (W88=24+EA) 
7 

7 

3 

OR reg,mem 

- 

bx,masker 
dx,color[di] 

88/86 

286 

386 

486 

9+EA (W88=13+EA) 

7 

6 

2 


| lOOOOO.tM' | | imid,00 1, r/m \ disp (0,1, or 2) data (1 or 2) 


OR regjmmed 

or dx,110110b 

88/86 

286 

386 

486 

4 

3 

2 

OR memjmmcd 

or flag rec,8 

88/86 

(b=17,w=25)+EA 



286 

7 



386 

7 



486 

3 


I 000011()» 1 data (lor 2) 


OR 


accum.immed 


ax,40h 


88/86 

286 

386 

486 


3 

2 
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ODI TSZAPC 


OUT 

Output to Port 


Transfers a byte or word (or a doubleword on the 80386/486) to a port 
from the accumulator register. The port address is specified by the 
destination operand, which can be DX or an 8-bit constant. In protected 
mode, a general-protection fault occurs if OUT is used when the current 
privilege level is greater than the value of the IOPL flag. 



* First protected-mode timing: CPL < IOPL. Second timing: CPL > IOPL. 
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OUTS/OUTSB/ 

OUTSW/OUTSD 

Output String to Port 

80186-80486 Only 


ODI TSZAPC 


Sends a string to a port. The string is considered the source and must 
be pointed to by DS:SI (even if an operand is given). The output port 
is specified in DX. For each element sent, SI is adjusted according to 
the size of the operand and the status of the direction flag. SI is 
increased if the direction flag has been cleared with CLD or decreased if 
the direction flag has been set with STD. 

If the OUTS form of the instruction is used, an operand must be 
provided to indicate the size of data elements to be sent. A segment 
override can be given. If OUTSB (bytes), OUTSW (words), or OUTSD 
(doublewords on the 80386/486 only) is used, the instruction 
determines the size of the data elements to be sent. 

OUTS and its variations are normally used with the REP prefix. Before 
the instruction is executed, CX should contain the number of elements 
to send. In protected mode, a general-protection fault occurs if OUTS is 
used when the current privilege level is greater than the value of the 
IOPL flag. 


j OllOlllw | 

OUTS DX, Isegreg:] src 
OUTSB [DX, \segreg: 1 src[ 
OUTSW JDX, [iegreg:] src[ 
OUTSD [DX, [segrfg:! src\ 

rep outs dx,buffer 

rep outsw 

88/86 — 

286 5 

386 14,pm=8,28* 

486 17,pm=10,32* 


* First protected-mode timing: CPL < IOPL. Second timing: CPL > IOPL. 
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ODI TSZAPC 


POP 

Pop 


Pops the top of the stack into the destination operand. The value at 
SS:SP is copied to the destination operand and SP is increased by 2. 
The destination operand can be a memory location, a general-purpose 
16-bit register, or any segment register except CS. Use RET to pop 
CS. On the 80386/486, 32-bit values can be popped by giving a 32-bit 
operand. ESP is increased by 4 for 32-bit pops. 


POP regl6 
POP reg32* 


88/86 8 (88=12) 


| 10001111 I I mod. 000,r/w~| 


pop param 


88/86 17+EA (88=25+EA) 


(Kin.v/vy.m | 


pop es 
pop ss 


8(88=12) 

5,pm=20 

7,pm=21 

3,pm=9 


| 00001111 — I I 10..WK.OO 1~~] 


POP segreg* pop fs 

pop gs 


286 — 

386 7,pm=21 

486 3,pm=9 


*80386/486 only. 
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POPA/POPAD 

Pop All 

80186-80486 Only 


0 

D 

I 

T 

S 

z 

A 

P 

C 











Pops the top 16 bytes on the stack into the 8 general-purpose registers. 
The registers are popped in the following order: DI. SI. BP, SP, BX, 
DX, CX, AX. The value for the SP register is actually discarded rather 
than copied to SP. POPA always pops into 16-bit registers. On the 
80386/486, use POPAD to pop into 32-bit registers. 





| 01100001 1 



POPA 

POPAD* 


88/86 

286 19 

386 24 

486 9 

*80386/486 only. 




POPF/POPFD 

Pop Flags 


0__D_J__L_S__Z__A_P__C_ 

±±± ±±±± ±± 


Pops the value on the top of the stack into the flags register. POPF 
always pops into the 16-bit flags register. On the 80386/486, use 
POPFD to pop into the 32-bit flags register. 


| 10011101 | 

POPF 

popf 

88/86 

8(88=12) 

POPFD* 


286 

5 



386 

5 



486 

9,pm=6 


* 80386/486 only. 
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ODI TSZAPC 


PUSH/PUSHW/PUSHD 

Push 


Pushes the source operand onto the stack. SP is decreased by 2 and the 
source value is copied to SS:SP. The operand can be a memory 
location, a general-purpose 16-bit register, or a segment register. On 
the 80186-80486 processors, the operand can also be a constant. On 
the 80386/486, 32-bit values can be pushed by specifying a 32-bit 
operand. ESP is decreased by 4 for 32-bit pushes. On the 8088 and 
8086, PUSH SP saves the value of SP after the push. On the 80186- 
80486 processors, PUSH SP saves the value of SP before the push. 
The PUSHW and PUSHD instructions push a word (2 bytes) and a 
doubleword (4 bytes), respectively. 


PUSH regl6 

push dx 

88/86 

11 (88=15) 

PUSH reg32* 


286 

3 

PUSHW regl6 


386 

2 

PUSHD regl6* 

PUSHD reg32* 


486 

1 


I mmn | | mod. 1 10 ,nm | d isp(2> 


PUSH meml6 

push [di] 

88/86 

16+EA (88=24+EA) 

PUSH mem32* 

push fcount 

286 

5 



386 

5 



486 

4 


| OO.i/q-.llO | 


PUSH segreg 

push es 

88/86 

10(88=14) 

PUSHW segreg 

push ss 

286 

3 

PUSHD segreg* 

push cs 

386 

2 



486 

3 


| 00001 I 1 1 ~1 I lO.-WY.i'.OOO | 


PUSH segreg 

push fs 

88/86 - 

PUSHW segreg 

push gs 

286 — 

PUSHD segreg* 


386 2 



486 3 


| 01I0KM) I data (lor 2) 


PUSH immed 

push ’a 1 

88/86 

PUSHW immed 

push 15000 

286 3 

PUSHD immed* 


386 2 



486 1 


* 80386/486 only. 
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PUSHA/PUSHAD 

Push All 

80186-80486 Only 


0 

D 

I 

T 

S 

Z 

A 

P 

C 











Pushes the eight general-purpose registers onto the stack. The registers 
are pushed in the following order: AX, CX, DX, BX, SP, BP, SI, DI. 
The value pushed for SP is the value before the instruction. PUSHA 
always pushes 16-bit registers. On the 80386/486, use PUSHAD to 
push 32-bit registers. 


| 01100000 1 

PUSHA 

pusha 

88/86 


PUSHAD* 


286 

17 



386 

18 



486 

11 


* 80386/486 only. 
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ODI TSZAPC 


PUSHF/PUSHFD 

Push Flags 


Pushes the flags register onto the stack. PUSHF always pushes the 16- 
bit flags register. On the 80386/486, use PUSHFD to push the 32-bit 
flags register. 


| 10011100 1 

PUSHF 

pushf 

88/86 

10(88=14) 

PUSHFD* 


286 

3 



386 

4 



486 

4,pm=3 


* 80386/486 only. 
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RCL/RCR/ROL/ROR 

Rotate 


O D I 


T S 


ZAP 


_C 

± 


Rotates the bits in the destination operand the number of times 
specified in the source operand. RCL and ROL rotate the bits left; 

RCR and ROR rotate right. 

ROL and ROR rotate the number of bits in the operand. For each 
rotation, the leftmost or rightmost bit is copied to the carry flag as 
well as rotated. RCL and RCR rotate through the carry flag. The carry 
flag becomes an extension of the operand so that a 9-bit rotation is 
done for 8-bit operands, or a 17-bit rotation for 16-bit operands. 

On the 8088 and 8086, the source operand can be either CL or 1. On 
the 80186-80486, the source operand can be CL or an 8-bit constant. 
On the 80186-80486, rotate counts larger than 31 are masked off, but 
on the 8088 and 8086, larger rotate counts are performed despite the 
inefficiency involved. The overflow flag is only modified by single-bit 
variations of the instruction; for multiple-bit variations, it is undefined. 



I l l represents one of the following bit codes: 000 for ROL. 001 for ROR, 010 for RCL. or 011 for 

RCR. 


CONTINUED... 
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| noiooiw | |7 

od. I I I *.rim | disp 10,1. or 2) 


ROL reg.CL 

ror ax, cl 

88/86 8+4n 

ROR reg.CL 

rol dx, cl 

286 5+n 



386 3 



486 3 

RCL /eg.CL 

rcl dx,cl 

88/86 8+4n 

RCR ret>,CL 

rcr bl,cl 

286 5+n 



386 9 



486 8-30 

ROL mem. CL 

: . : , 

88/86 20+EA+4n (W88=28+EA+4n) 

ROR mem. CL 

rol WORD PTR [bp+6],cl 

286 8+n 



386 7 



486 4 

RCL mem. CL 

rcr WORD PTR [bx+di],cl 

88/86 20+EA+4n (W88=28+EA+4n) 

RCR mem. CL 

rcl masker 

286 8+n 



386 10 



486 9-31 

| llOOOOOvv | | n 

wd.TTT*,rlm \ disn (0.1. or 2) 

data(l) 

ROL reg.immedS 

rol ax, 13 

88/86 — 

ROR reg.immedS 

ror bl,3 

286 5+n 



386 3 



486 2 

RCL reg,immed8 

rcl bx, 5 

88/86 — 

RCR reg.immed8 

rcr si, 9 

286 5+n 



386 9 



486 8-30 

ROL mem.immedS 

rol BYTE PTR [bx],10 

88/86 — 

ROR mem.immedS 

ror bits,6 

286 8+n 



386 7 



486 4 

RCL mem.immedS 

rcl WORD PTR [bp+8],5 

88/86 — 

RCR mem.immedS 

ret masker,3 

286 8+n 



386 10 



486 9-31 


I'lT represents one of the following bit codes: 000 for ROL, 001 for ROR, 010 for RCL, or 011 for 
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REP 

Repeat String 


ODI TSZAPC 


Repeats a string instruction the number of times indicated by CX. 
First, CX is compared to zero; if it equals zero, execution proceeds to 
the next instruction. Otherwise, CX is decremented, the string 
instruction is performed, and the loop continues with CX being 
compared to zero. REP is used with MO VS and STOS. REP can also 
be used with INS and OUTS on the 80186-80486 processors. On all 
processors except the 80386/486, combining a repeat prefix with a 
segment override can cause errors if an interrupt occurs. 


“EH 


REP MOVS desire 
REP MOVSB \dest,src\ 
REP MOVSW ldest,src] 
REP MOVSD ItfesfySrcl 


rep movs source,dest 
rep movsw 


9+17n (W88=9+25n) 

5+4n 

7+4n 

12+3n* 


REP STOS dest 
REP STOSB Idestl 
REP STOSW Idestl 
REP STOSD \dest\ 


9+10n (W88=9+14n) 

4+3n 

5+5n 

7+4nt 


lOlOlOlH- ~| 


REP LCDS dest 
REP LODSB idestl 
REP LODSW \dest] 
REP LODSD ](/<’\/|| 


| 0110110m- 


REP INS dest,DX 
REP INSB Id«/.DXJ 
REP INSW |d«f,DX|| 
REP INSD [rft-.v/.DX] 


286 5+4n 

386 13+6n,pm=(7,27)+6n§ 

486 l6+8n,pni=( ]().3 (M+Sm§ 


REP OUTS DX,.v»r 
REP OUTSB l.vrf| 
REP OUTSW prcl 
REP OUTSD JiTcJ 


88/86 — 

286 5+4n 

386 12+5n,pm=(6,26)+5n§ 
486 l7+5n,pm=( 11,31 )+Sn§ 


♦ 5 if n = 0,13 if n = I 
t 5 if n = 0 

§ First protectcd-mode timing: CPL 5 IOPL. Second timing: CPL > IOPL. 
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O D 


IllAii 


REPcondition 

Repeat String Conditionally 


Repeats a string instruction as long as condition is true and the 
maximum count has not been reached. REPE and REPZ (they are 
synonyms) repeat while the zero flag is set. REPNE and REPNZ (they 
are synonyms) repeat while the zero flag is cleared. The conditional- 
repeat prefixes should only be used with SCAS and CMPS, since these 
are the only string instructions that modify the zero flag. Before 
executing the instruction, CX should be set to the maximum allowable 
number of repetitions. First, CX is compared to zero; if it equals zero, 
execution proceeds to the next instruction. Otherwise, CX is 
decremented, the string instruction is performed, and the loop continues 
with CX being compared to zero. On all processors except the 
80386/486, combining a repeat prefix with a segment override may 
cause errors if an interrupt occurs during a string operation. 


| nil 0011 I I 101001 Ivv I 


REPE CMPS srcrfest 

repz 

cmpsb 

88/86 

9+22n (W88=9+30n) 

REPE CMPSB \src4est} 

repe 

cmps src,dest 

286 

5+9n 

REPE CMPSW lsrc,destl 



386 

5+9n 

REPE CMPSD Isrcjest] 



486 

7+7n* 


| 11110011 —I I 1010111w I 


REPE SCAS dest 

repe seas dest 

88/86 

9+15n (W88=9+19n) 

REPE SCASB \dest\ 

repz scasw 

286 

5+8n 

REPE SCASW Idesti 


386 

5+8n 

REPE SCASD [dest] 


486 

7+5n* 


1 1 1 I 10010 I I 101001 I >v I 


REPNE CMPS src,dest 

repne empsw 

88/86 

9+22n (W88=9+30n) 

REPNE CMPSB Is/r^es/l] 

repnz cmps src,dest 

286 

5+9n 

REPNE CMPSW 


386 

5+9n 

REPNE CMPSD lsrc,desil 


486 

7+7n* 


| 1 1 I 10010— I I 10101 I IV' I 


REPNE SCAS dest 

repne seas dest 

88/86 

9+15n (W88=9+19n) 

REPNE SCASB [dest\ 

repnz scasb 

286 

5+8n 

REPNE SCASW \dest\ 


386 

5+8n 

REPNE SCASD \dest\ 


486 

7+5n* 


*5 


ifn = 0 
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RET/RETN/RETF 

Return from Procedure 


Returns from a procedure by transferring control to an address popped 
from the top of the stack. A constant operand can be given indicating 
the number of additional bytes to release. The constant is normally 
used to adjust the stack for arguments pushed before the procedure was 
called. The size of a return (near or far) is the size of the procedure in 
which the RET is defined with the PROC directive. RETN can be used 
to specify a near return; RETF can specify a far return. A near return 
pops a word into IP. A far return pops a word into IP and then pops a 
word into CS. After the return, the number of bytes given in the 
operand (if any) is added to SP. 


| 11000011 | 

RET 

RETN 

ret 

retn 

88/86 16(88=20) 

286 11+m 

386 10+m 

486 5 

| 11000010 1 data (2) 

RET immedl6 

RETN immedl6 

ret 2 

retn 8 

88/86 20(88=24) 

286 11+m 

386 10+m 

486 5 

| 11001011 | 

RET 

RETF 

retf 

88/86 26 (88=34) 

286 15+m,pm=25+m,55* 

386 18+m,pm=32+m,62* 

486 13,pm= 18,33* 

| 11001010 1 data (2) 

RET immedl6 

RETF immedl6 

ret 8 
retf 32 

88/86 25 (88=33) 

286 15+m,pm=25+m,55* 

386 18+m,pm=32+m,68* 

486 14,pm=17,33* 


The first protected-mode timing is for a return to the same privilege level; the second is for a return 
to a lesser privilege level. 
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ROL/ROR 

Rotate 


See RCL/RCR 


SAHF 

Store AH into Flags 


Transfers AH into bits 0 to 7 of the flags register. This includes the 
carry, parity, auxiliary carry, zero, and sign flags, but not the trap, 
interrupt, direction, or overflow flags. 


10011110 ~| 


SAL/SAR 

Shift 


See SHL/SHR/SAL/SAR. 
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SBB 

Subtract with Borrow 


O D I 


T S Z A P C 

: = ± v 


Adds the carry flag to the second operand, then subtracts that value 
from the first operand. This result is assigned to the first operand. SBB 
is used to subtract the least significant portions of numbers that must 
be processed in multiple registers. 


| (XXIllOt/vv | | mod, ret;, rim \ disp (0, 1 .or 2) 


SBB reg.reg 

sbb dx, cx 

88/86 

286 

386 

486 

3 

2 

2 

1 

SBB mem.reg 


sbb WORD PTR m32[2],dx 

88/86 

16+EA (W88=24+EA) 




286 

7 




386 

6 




486 

3 

SBB reg.mem 


sbb dx,WORD PTR m32[2] 

88/86 

9+EA (W88=13+EA) 




286 

7 




386 

7 




486 

2 

| 100000.w | T 

mod. 011 ,rlm | disp (0.1. or 2) 

data (lor 2) 

SBB reg.immed 


sbb dx, 45 

88/86 

4 




286 

3 




386 

2 




486 

1 

SBB mem.immed 


sbb WORD PTR m32[2],40 

88/86 

17+EA (W88=25+EA) 




286 

7 




386 

7 




486 

3 

| 000111 Oh- | 

data(l or 2) 



SBB accum.immed 


sbb ax,320 

88/86 

4 




86 

3 




386 

2 




486 

1 
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o n I I " r \| r c 

± ± ± ± ± ± 


SCAS/SCASB/ 

SCASW/SCASD 

Scan String Flags 


Scans a string to find a value specified in the accumulator register. The 
string to be scanned is considered the destination and must be pointed 
to by ES:DI (even if an operand is specified). For each element, the 
destination element is subtracted from the accumulator value and the 
flags are updated to reflect the result (although the result is not stored). 
DI is adjusted according to the size of the operands and the status of the 
direction flag. DI is increased if the direction flag has been cleared with 
CLD or decreased if the direction flag has been set with STD. 

If the SCAS form of the instruction is used, an operand must be 
provided to indicate the size of the data elements to be processed. No 
segment override is allowed. If SCASB (bytes), SCASW (words), or 
SCASD (doublewords on the 80386/486 only) is used, the instruction 
determines the size of the data elements to be processed and whether the 
element scanned for is in AL, AX, or EAX. 

SCAS and its variations are normally used with repeat prefixes. 

REPNE (or REPNZ) is used to find the first match of the accumulator 
value. REPE (or REPZ) is used to find the first nonmatch. Before the 
comparison, CX should contain the maximum number of elements to 
compare. After a REPNE SCAS, the zero flag will be cleared if no 
match was found. After a REPE SCAS, the zero flag will be set if no 
nonmatch was found. Otherwise, ES:DI will point to the element past 
the first match or nonmatch. 


| 101011 lw I 

SCAS iES:||dw» 

SCASB 1 IES:J desti 
SCASW | JES:1 desij 
SCASD 1 JES:[ dest\ 

repne scasw 
repe scasb 

seas es:destin 

88/86 15 (W88=19) 

286 7 

386 7 

486 6 
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SET condition 

Set Conditionally 

80386/486 Only 


T S Z A P C 


Sets the byte specified in the operand to 1 if condition is true or to 0 if 
condition is false. The condition is tested by checking the flags shown 
in the table on the following page. The instruction is used to set 
Boolean flags conditionally. 




| 00001111 1 1 \00\cond I 1 mod,000,rlm \ 


SET condition reg8 

setc dh 

88/86 - 
286 — 

386 4 

486 true =4, false=3 

SETcondition mem8 

seto BTYE PTR [ebx] 

setle flag 

sete Booleans[di] 

88/86 - 

286 — 

386 5 

486 true=3, false=4 


CONTINUED... 
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SET CONDITIONS 


Opcode Mnemonic Flags Checked Description 


10010010 


1001001 I 


10010110 


10010111 


10010100 


10010101 


10011100 


10011101 


10011110 


10011111 


11)01 1000 


10011001 


10010010 


10010011 


10010000 


10010001 


10011010 


10011011 


SETB/SETNAE 

SETAE/SETNB 

SETBE/SETNA 

SETA/SETNBE 

SETE/SETZ 

SETNE/SETNZ 

SETL/SETNGE 

SETGE/SETNL 

SETLE/SETNG 

SETG/SETNLE 

SETS 

SETNS 

SETC 

SETNC 

SETO 

SETNO 

SETP/SETPE 

SETNP/SETPO 


CF=1 

CF=0 

CF=1 orZF=l 

CF=0 and ZF=0 

ZF=1 

ZF=0 

SF*OF 

SF=OF 

ZF=1 orSF*OF 

ZF=0 and SF=OF 

SF=1 

SF=0 

F=1 

CF=0 

OF=l 

OF=0 

PF=1 

PF=0 


Set if below/not above or equal 
(unsigned comparisons) 

Set if above or equal/not below 
(unsigned comparisons) 

Set if below or equal/not above 
(unsigned comparisons) 

Set if above/not below or equal 
(unsigned comparisons) 

Set if equal/zero 

Set if not equal/not zero 

Set if less/not greater or equal (signed 
comparisons) 

Set if greater or equal/not less (signed 
comparisons) 

Set if less or equal/not greater or equal 
(signed comparisons) 

Set if greater/not less or. equal (signed 
comparisons) 

Set if sign 

Set if not sign 

Set if carry 

Set if not carry 

Set if overflow 

Set if not overflow 

Set if parity/parity even 

Set if no parity/parity odd 
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SGDT/SIDT/SLDT 

Store Descriptor Table 

80286-80486 Only 


o 

D 

1 

T 

S 

Z 

A 

P 

C 











Stores a descriptor table register into a specified operand. SGDT stores 
the Global Descriptor Table; SIDT, the Interrupt Descriptor Table; and 
SLDT, the Local Descriptor Table. These instructions are generally 
useful only in privileged mode. See Intel documentation for details on 
descriptor tables and other protected-mode concepts. 



disp (2) 

| 00001111 1 1 00000001 1 1 mod,000,r/m \ 


SGDT mem48 

sgdt descriptor 

88/86 — 

286 11 

386 9 

486 10 


disp (2) 

| 00001111 | | 00000001 | | mod,00 1 ,nm \ 


SIDT mem48 

sidt descriptor 

88/86 

286 12 

386 9 

486 10 


disp (0,1, or 2) 

| 00001111 | | 00000000 | | mod, 000,rIni \ 


SLDT regl6 

sidt ax 

88/86 — 

286 2 

386 2 

486 2 

SLDT meml6 

sidt selector 

88/86 

286 3 

386 2 

486 3 
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SHL/SHR/SAL/SAR 

Shift 


O DlHIilC 

± ± ± ? ± ± 


Shifts the bits in the destination operand the number of times specified 
by the source operand. SAL and SHL shift the bits left; SAR and SHR 
shift right. 

With SHL, SAL, and SHR, the bit shifted off the end of the operand is 
copied into the carry flag and the leftmost or rightmost bit opened by 
the shift is set to 0. With SAR, the bit shifted off the end of the 
operand is copied into the carry flag and the leftmost bit opened by 
the shift retains its previous value (thus preserving the sign of the 
operand). SAL and SHL are synonyms. 

On the 8088 and 8086, the source operand can be either CL or 1. On 
the 80186-80486 processors, the source operand can be CL or an 8-bit 
constant. On the 80186-80486 processors, shift counts larger than 31 
are masked off, but on the 8088 and 8086, larger shift counts are 
performed despite the inefficiency involved. The overflow flag is only 
modified by single-bit variations of the instruction; for multiple-bit 
variations, it is undefined. 


| 1101000m 1 1 mod,77T* 

.r/m | disp (0,1. or 2) 



SAR reg.l 

sar 

di, 1 

88/86 

2 


sar 

cl/1 

286 

2 




386 

3 




486 

3 

SAL reg,l 

shr 

dh, 1 

88/86 

2 

SHL reju.l 

shl 

si, 1 

286 

2 

SHR reg.l 

sal 

bx, 1 

386 

3 




486 

3 

SAR mem, 1 

sar 

count,1 

88/86 

15+EA (W88=23+EA) 




286 

7 




386 

7 




486 

4 

SAL mem, 1 

sal 

WORD PTR m32[0],1 

88/86 

15+EA (W88=23+EA) 

SHL mem, 1 

shl 

index,1 

286 

7 

SHR mem, 1 

shr 

unsign[di],1 

386 

7 




486 

4 


* TTT represents one of the following bit codes: 100 for SHL or SAL, 101 for SHR, or 111 for SAR. 


CONTINUED... 


PROCESSOR INSTRUCTIONS 139 


























| 1101001 iv | [T 

od,TTT*,rlm \ disD (0.1. or 2) 


SAR re«,CL 

sar bx, cl 

88/86 8+4n 


sar dx,cl 

286 5+n 



386 3 



486 3 

SAL retf.CL 

shr dx,cl 

88/86 8+4n 

SHL reg, CL 

shl di,cl 

286 5+n 

SHR reg.CL 

sal ah, cl 

386 3 



486 3 

SAR mem.C L 

sar sign,cl 

88/86 20+EA+4n (W88=28+EA+4n) 


sar WORD PTR [bp+8],cl 

286 8+n 



386 7 



486 4 

SAL mem.CL 

shr WORD PTR m32[2],cl 

88/86 20+EA+4n (W88=28+EA+4n) 

SHL mem.CL 

sal BYTE PTR [di],cl 

286 8+n 

SHR mem.CL 

shl index,cl 

386 7 



486 4 

| llOOOOOw | | mod,TTT*,r/m \ disD (0.1. or 2) 

data(l) 

SAR reg,immed8 

sar bx, 5 

88/86 — 


sar cl,5 

286 5+n 



386 3 



486 2 

SAL reg.immed8 

sal cx, 6 

88/86 — 

SHL reg,immed8 

shl di,2 

286 5+n 

SHR reg,immed8 

shr bx,8 

386 3 



486 2 

SAR mem,immed8 

sar sign_count, 3 

88/86 — 


sar WORD PTR [bx],5 

286 8+n 



386 7 



486 4 

SAL mem.immed8 

shr meml6,ll 

88/86 — 

SHL mem.immed8 

shl unsign,4 

286 8+n 

SHR mem,immed8 

sal array[bx+di],14 

386 7 



486 4 


* TIT represents one of the following bit codes: 100 for SHL or SAL, 101 for SHR, or 111 for SAR. 
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SHLD/SHRD 

Double Precision Shift 

80386/486 Only 


? ± ± ? ± ± 


Shifts the bits of the second operand into the first operand. The number 
of bits shifted is specified by the third operand. SHLD shifts the first 
operand to the left by the number of positions specified in the count. 
The positions opened by the shift are filled by the most significant bits 
of the second operand. SHRD shifts the first operand to the right by the 
number of positions specified in the count. The positions opened by 
the shift are filled by the least significant bits of the second operand. 
The count operand can be either CL or an 8-bit constant. If a shift 
count larger than 31 is given, it is adjusted by using the remainder 
(modulus) of a division by 32. 



disp (0, l,or2) data (I) 

| 00001111 1 1 10100100 1 1 mod,reg,rlm \ 


SHLD regl6,regl6,immed8 
SHLD reg32.reg32,immed8 

shld ax,dx,10 

88/86 — 

286 — 

386 3 

486 2 

SHLD meml6,regl6,immed8 
SHLD mem32,reg32,immed8 

shld bits,cx,5 

88/86 — 

286 — 

386 7 

486 3 


disp (0,1, or 2) data (1) 

| 00001111 | | 10101100 | | mod,reg,rlm \ 


SHRD regl6,regl6,immed8 
SHRD reg32,reg32,immed8 

shrd cx,si,3 

88/86 - 
286 — 

386 3 

486 2 

SHRD meml6,regl6,immed8 
SHRD mem32,reg32,immed8 

shrd [di],dx,13 

88/86 — 

286 — 

386 7 

486 3 


disp (0,1. or 2) 

| 00001111 | | 10100101 | | mod,reg,rlm \ 

SHLD reg!6,regl 6.CL 
SHLD reg32.reg32. CL 

shld ax,dx,cl 

88/86 — 

286 — 

386 3 

486 3 

SHLD nteml6,regl6,CL 
SHLD mem32,reg32, CL 

shld masker,ax,cl 

88/86 — 

286 — 

386 7 

486 4 


CONTINUED... 
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disp (0,1, or 2) 

| 00001111 1 1 10101101 1 1 mod,reg,rlm \ 


SHRD reglb.regl 6.CL 
SHRD reg32.reg32 ,CL 

shrd bx,dx,cl 

88/86 — 

286 — 

386 3 

486 3 

SHRD meml6.reg]6,CL 
SHRD mem32,reg32 ,CL 

shrd [bx],dx,cl 

88/86 - 
286 — 

386 7 

486 4 


SMSW 

Store Machine Status Word 

80286-80486 Only 


ODI TSZAPC 


Stores the Machine Status Word (MSW) into a specified memory 
operand. SMSW is generally useful only in protected mode. See Intel 
documentation for details on the MSW and other protected-mode 
concepts. 


| 00001 II I I I 00000001 I I disp <0. I , or 2) 


smsw machine 
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STC 

Set Carry Flag 


Sets the carry flag. 


| 11111001 I 


88/86 2 
286 2 
386 2 


STD 

Set Direction Flag 


Sets the direction flag. All subsequent string instructions will process 
down (from high addresses to low addresses). 


| iimioi | 


88/86 2 
286 2 
386 2 
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STI 

Set Interrupt Flag 


o 

D 

I 

T 

S 

Z 

A 

P 

C 



1 








Sets the interrupt flag. When the interrupt flag is set, maskable 
interrupts are recognized. If interrupts were disabled by a previous CLI 
instruction, pending interrupts will not be executed immediately; they 
will be executed after the instruction following STI. 


| ii moil | 


STI 


386 


486 
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ODI TSZAPC 


STOS/STOSB/ 

STOSW/STOSD 

Store String Data 


Stores the value in the accumulator in a string. The string to be filled 
is the destination and must be pointed to by ES:DI (even if an operand 
is given). For each source element loaded, DI is adjusted according to 
the size of the operands and the status of the direction flag. DI is 
increased if the direction flag has been cleared with CLD or decreased if 
the direction flag has been set with STD. 

If the STOS form of the instruction is used, an operand must be 
provided to indicate the size of the data elements to be processed. No 
segment override is allowed. If STOSB (bytes), STOSW (words), or 
STOSD (doublewords on the 80386/486 only) is used, the instruction 
determines the size of the data elements to be processed and whether the 
element comes from AL, AX, or EAX. 

STOS and its variations are often used with the REP prefix. Before the 
repeated instruction is executed, CX should contain the number of 
elements to store. 


| 1010101m 1 

STOS |ES:D dest 

STOSB HES:ld«f] 
STOSW 1 IES:J desti 
STOSD I JES:1 desfl 

stos es:dstring 
rep stosw 

rep stosb 

88/86 11 (W88=15) 

286 3 

386 4 

486 5 
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STR 

Store Task Register 

80286-80486 Only 


o 

D 

I 

T 
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C 











Stores the current task register to the specified operand. This 
instruction is generally useful only in privileged mode. See Intel 
documentation for details on task registers and other protected-mode 
concepts. 







| 00001111 1 

| 00000000 

| | mod, (X) 1, reg \ 

disp (0. l,or2) 





STR regl6 


str 


88/86 - 
286 2 

386 2 

486 2 

STR mem!6 


str 

taskreg 

88/86 — 

286 3 

386 2 

486 3 
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SUB 

Subtract 


0 

D 

1 

T 

S 

z 
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± 




± 

± 

± 

± 

± 


Subtracts the source operand from the destination operand and stores the 
result in the destination operand. 




| 001010</vc 1 1 mod, reg, rim \ disp (0.1 .or2) 


SUB reg,reg 

sub ax,bx 
sub bh, dh 

88/86 3 

286 2 

386 2 

486 1 

SUB mem.reg 

sub tally,bx 
sub array[di],bl 

88/86 16+EA (W88=24+EA) 

286 7 

386 6 

486 3 

SUB reg.mem 

sub cx,discard 
sub al, [bx] 

88/86 9+EA (W88=13+EA) 
286 7 

386 7 

486 2 


data(l or 2) 

| 100000s w | | mod,\0\,rlm \ disp (0.1. or 2) 


SUB reg.immed 

sub dx,45 
sub bl, 7 

88/86 4 

286 3 

386 2 

486 1 

SUB mem.immed 

sub total,4000 

sub BYTE PTR [bx+di],2 

88/86 17+EA (W88=25+EA) 

286 7 

386 7 

486 3 

| OOlO.'/m- | data (lor 2) 

SUB accum.immed 

sub ax,32000 

88/86 4 

286 3 

386 2 

486 1 
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TEST 

Logical Compare 


o 

D 

I 

T 

S 

Z 

A 

P 

c 

0 




± 

± 

9 

± 

0 


Tests specified bits of an operand and sets the flags for a subsequent 
conditional jump or set instruction. One of the operands contains the 
value to be tested. The other contains a bit mask indicating the bits to 
be tested. TEST works by doing a bitwise AND operation on the 
source and destination operands. The flags are modified according to the 
result, but the destination operand is not changed. This instruction is 
the same as the AND instruction, except the result is not stored. 


| lOOOOlOw' I I mod.reg.rlm~\ disp (0.1, or 2) 


TEST reg.reg 

test dx,bx 
test bl,ch 

88/86 3 

286 2 

386 2 

486 1 

TEST mem,reg 

test dx,flags 

88/86 9+EA (W88=13+EA) 

TEST reg,mem* 

test bl,bitarray[bx] 

286 6 



386 5 



486 2 


I HI 101 hr | | mnd.OOO.r/m \ disp (0,1, or 2) data (1 or 2) 


TEST regjmmed 

test cx,30h 
test cl,1011b 

88/86 5 

286 3 

386 2 

486 1 

TEST memjmmed 

test masker,1 

88/86 11+EA 


test BYTE PTR {bx],03h 

286 6 



386 5 



486 2 


| 10101 (XV | data (1 or 2) 


TEST accum,immed 


* MASM transposes TEST reg,mem\ that is, it is encoded as TEST mem,reg. 
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VERR/VERW 

Verify Read or Write 

80286-80486 Protected Only 


Verifies that a specified segment selector is valid and can be read or 
written to at the current privilege level. VERR verifies that the selector 
is readable. VERW verifies that the selector can be written to. If the 
segment is verified, the zero flag is set. Otherwise, the zero flag is 
cleared. 



disp (0,1, or 2) 

| 00001111 1 1 00000000 1 \mod,\00,r/m | 


VERR regl6 


88/86 - 
286 14 

386 10 

486 11 

VERR mem16 

verr selector 

88/86 - 
286 16 

386 11 

486 11 


disp (0,1, or 2) 

| 00001111 | | 00000000 | | mod, lOl.r/m | 


VERW reg 16 


88/86 - 
286 14 

386 15 

486 11 

VERW mem/6 

verw selector 

88/86 - 
286 16 

386 16 

486 11 
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WAIT 

Wait 


Suspends processor execution until the processor receives a signal that 
a coprocessor has finished a simultaneous operation. It should be used 
to prevent a coprocessor instruction from modifying a memory location 
that is being modified simultaneously by a processor instruction. 

WAIT is the same as the coprocessor FWAIT instruction. 


WAIT 


88/86 

286 

386 

486 


4 

3 

6 

1-3 
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ODI TSZAPC 


WBINVD 

Write Back and Invalidate 
Data Cache 
80486 Only 


Empties the contents of the current data cache but first writes changes 
to memory. Proper use of this instruction requires knowledge of how 
contents are placed in the cache. WBINVD is intended primarily for 
systems programming. See Intel documentation for details. 


XADD 

Exchange and Add 

80486 Only 


ooooiooi ~| 


Adds the source and destination operands and stores the sum in the 
destination; simultaneously, the original value of the destination is 
moved to the source. The instruction sets flags according to the result 
of the addition. 
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XCHG 

Exchange 


o 


D I 


T S Z A P C 


Exchanges the values of the source and destination operands. 


| 100001 ltv | | mod.reg,r/m 

| disp (0,1, or 2) 



XCHG regseg 

xchg 

cx, dx 

88/86 

4 


xchg 

1, dh 

286 

3 


xchg 

al, ah 

386 

3 




486 

3 

XCHG regsnem 

xchg 

[bx],ax 

88/86 

17+EA (W88=25+EA) 

XCHG mem.reg 

xchg 

bx,pointer 

286 

5 




386 

5 




486 

5 

| 10010 reg | 

XCHG accum,regl6* 

xchg 

ax, cx 

88/86 

3 

XCHG regl6,accum* 

xchg 

cx,ax 

286 

3 




386 

3 




486 

3 


* On the 80386/486, the accumulator may also be exchanged with a 32-bit register. 


XLAT/XLATB 

Translate 


ODI TSZAPC 


Translates a value from one coding system to another by looking up 
the value to be translated in a table stored in memory. Before the 
instruction is executed, BX should point to a table in memory and AL 
should contain the unsigned position of the value to be translated from 
the table. After the instruction, AL contains the table value with the 
specified position. No operand is required, but one can be given in order 
to specify a segment override. DS is assumed unless a segment override 
is given. XLATB is a synonym for XLAT. Either version allows an 
operand, but neither requires one. 


| 11010111 | 

XLAT ] Jsegrc#:] mem 1 

xlat 

88/86 

11 

XLATB 1 Isegreg:] mem] 

xlatb es:table 

286 

5 



386 

5 



486 

4 
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XOR 

Exclusive OR 


o 

D 

I 

T 

S 

z 

A 

P 

C 

0 




± 

± 

? 

± 

0 


Performs a bitwise exclusive OR operation on the source and 
destination operands and stores the result in the destination. For each 
bit position in the operands, if both bits are set or if both bits are 
cleared, the corresponding bit of the result is cleared. Otherwise, the 
corresponding bit of the result is set. 


| OOIKXWh’ I I 111, »t/, rim \ disp (0. 1. or 2) 


XOR reg,reg 

xor cx,bx 

xor ah,al 

88/86 

286 

386 

486 

3 

2 

2 

XOR mem.reg 

xor [bp+10],cx 

88/86 

16+EA (W88=24+EA) 


xor masked,bx 

286 

7 



386 

6 



486 

3 

XOR reg.mem 

xor cx,flags 

88/86 

9+EA (W88=13+EA) 


xor bl,bitarray[di] 

286 

7 



386 

7 



486 

2 

| 1 OOOOO.vu | | mod,\\0,rlm \ disp (0.1. or 2) 

data (I o, 

r2) 

XOR regjmmed 

xor bx,lOh 

88/86 

4 


xor bl,1 

286 

3 



386 

2 



486 

1 

XOR mem.immed 

xor Boolean,1 

88/86 

17+EA (W88=25+EA) 


xor switches[bx],101b 

286 

7 



386 

7 



486 

3 


| OOllOIOvi | data (/ or 2) 


286 

386 

486 
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Coprocessor 


Interpreting Coprocessor Instructions 
Syntax 
Examples 
Clock Speeds 
Instruction Size 
Architecture 
Instructions 




Topical Cross-Reference 
for Coprocessor 


Load Arithmetic 


FLD/F1LD/FBLD 

FXCH 

FLDCW 

FLDENV 

FRSTOR 

Store Data 

FST/FIST 

FSTP/FISTP/FBSTP 

FSTCW/FNSTCW 

FSTSW/FNSTSW 

FSAVE/FNSAVE 

FSTENV/FNSTENV 


Load Constant 

FLDl 

FEDL2E 

FLDL2T 

FLDLG2 

FLDLN2 

FLDPI 

FLDZ 


FADD/FI ADD 
FADDP 
FSUB/FISUB 
FSUBP 

FSUBR/FISUBR 

FSIBRP 

FMUL/FIMUL 

FMULP 

FSCALE 

FDIV/FIDIV 

FDIVP 

FDIVR/FIDIVR 

FDIVRP 

FABS 

FCHS 

FRNDINT 

FSQRT 

FPREM 

FPREM15 

FXTRACT 


Transcendental 

FPTAN 

FPATAN 

FSIN§ 

FCOS§ 

FSINCOSS 

F2XM1 

FYL2X 

FYL2P1 

FPREM 

FPREMH 


Compare 

FCOM/F1COM 

FCOMP/FICOMP 

FCOMPP 

FUCOMS 

FUCOMP5 

FUCOMPPS 

FTST 

FXAM 

FSTSW/FNSTSW 


Processor 

Control 

FINIT/FNIN1T 

FFREE 

FNOP 

FWAIT 

FDECSTP 

FINCSTP 

FCLEX/FNCLEX 

FSETPMt 

FDISI/FNDIS1* 

FENI/FNENI* 

FSAVE/FNSAVE 

FLDCW 

FRSTOR 

FSTCW/FNSTCW 

FSTSW/FNSTSW 

FSTENV/FNSTENV 


t 80287 only. § 80387/486 only. 


8087 only. 









Interpreting Coprocessor Instructions 


This section provides an alphabetical reference to instructions of the 
8087, 80287, and 80387 coprocessors. The format is the same as the 
processor instructions except that encodings are not provided. 
Differences are noted below. 

The 80486 has the coprocessor built in. This one chip executes all the 
instructions listed in the previous section and this section. 

Syntax 

Syntaxes in Column 1 use the following abbreviations for operand 
types: 

reg A coprocessor stack register 

memreal A direct or indirect memory operand storing a real number 

memint A direct or indirect memory operand storing a binary integer 

membcd A direct or indirect memory operand storing a BCD number 

Examples 

The position of the examples in Column 2 is not related to the clock 
speeds in Column 3. 

Clock Speeds 

Column 3 shows the clock speeds for each processor. Sometimes an 
instruction may have more than one possible clock speed. The 
following abbreviations are used to specify variations: 

EA Effective address. This applies only to the 8087. See the 

Processor Section, “Timings on the 8088 and 8086 
Processors,” for an explanation of effective address timings. 

s,l,t Short real, long real, and 10-bvte temporary real. 

w,d,q Word, doubleword, and quadword binary integer. 

to,fr To or from stack top. On the 80387 and 80486, the to 

clocks represent timings when ST is the destination. The fr 
clocks represent timings when ST is the source. 
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Instruction Size 

The instruction size is always two bytes for instructions that do not 
access memory. For instructions that do access memory, the size is 
four bytes on the 8087 and 80287. On the 80387 and 80486, the size 
for instructions that access memory is four bytes in 16-bit mode or six 
bytes in 32-bit mode. 

On the 8087, each instruction must be preceded by the WAIT (also 
called FWAIT) instruction, thereby increasing the instruction’s size by 
one byte. The assembler inserts WAIT automatically by default, or 
with the .8087 directive. 

Architecture 

The 8087, 80287, and 80387 coprocessors, along with the 80486, have 
several elements of architecture in common. All have a register stack 
made up of eight 80-bit data registers. These can contain floating-point 
numbers in the temporary real format. The coprocessors also have 14 
bytes of control registers. Figure 2 shows the format of registers. 


Coprocessor Data Registers 


79 63 0 



Control Registers 


Control Word 
Status Word 
Tag Word 
Instruction pointer 
Operand pointer 


Figure 2 Coprocessor Registers 
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The most important control registers are the control word and the status 
word. Figure 3 shows the format of these registers. 


Control Word 

15 7 0 



Abbreviations for fields in Control Word and Status Word 


IC - Infinity Control 

0 = Projective (default on 8087 and 80287) 

I = Affine 

* 8087 and 80287 only; 80387 
uses affine regardless of setting 

RC - Rounding Control 

00 = Round to nearest or even (default) 

01 = Round down toward -infinity 
10 = Round up toward +infinity 

II = Chop by truncating toward 0 


Exception Masks and Flags 
PM/PE - Precision 
UM/UE - Underflow 
OM/OE - Overflow 
ZM/ZE - Zero Divide 
DM/DE - Denormalized Operand 
I M/IE - Invalid Operation 
For masks, 

1 = masked; 0 = unmasked 
For exceptions, 

1 = exceptions; 0 = no exception 


PC - Precision Control 
00 = 24-bit mantissa 

10 = 53-bit mantissa 

11 = 64-bit mantissa (default) 

IE - Interrupt Enable Mask 

* 8087 only; undefined on 80287 
and 80387 

SF - Stack Flag 

* 80387 only; undefined on 8087 
and 80287 


B - Busy 

(1 = exception control unit active) 

C3'| 

C2 L Condition Codes 

Cl f - 

CO ) 

ST - Stack Top Pointer 
(points to current top of stack) 

ES - Error Summary (80287/387) 
* IR - Interrupt Request on 8087 


Figure 3 Control Word and Status Word 
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F2XM1 

2 X - 1 


Calculates Y = 2 X - 1. X is taken from ST. The result, Y, is returned 
in ST. X must be in the range 0 < X < 0.5 on the 8087/287, or in the 
range -1.0 < X < +1.0 on the 80387/486. 


F2XM1 

f2xml 

87 

310-630 



287 

310-630 



387 

211-476 



486 

140-279 





FABS 




Absolute Value 

Converts the element in ST to its absolute value. 


FABS 

fabs 

87 

10-17 



287 

10-17 



387 

22 



486 

3 
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FADD/FAD DP/FI ADD 

Add 


Adds the source to the destination and returns the sum in the 
destination. If two register operands are specified, one must be ST. If a 
memory operand is specified, the sum replaces the value in ST. 
Memory operands can be 32- or 64-bit real numbers or 16- or 32-bit 
integers. If no operand is specified, ST is added to ST( 1) and the stack 
is popped, returning the sum in ST. For FADDP. the source must be 
ST; the sum is returned in the destination and ST is popped. 


FADD 

fadd st,st(2) 
fadd st(5),st 
fadd 

87 70-100 

287 70-100 

387 to=23-31, fr=26-34 

486 8-20 

FADDP reg.ST 

faddp st(6),st 

87 75-105 

287 75-105 

387 23-31 

486 8-20 

FADD memreal 

fadd QWORD PTR [bx] 
fadd shortreal 

87 (s=90-120,s=95-125 )+E A 

287 s=90-l 20,1=95-125 

387 s=24-32,l=29-37 

486 8-20 

FI ADD memint 

fiadd inti6 
fiadd warray[di] 
fiadd double 

87 (w= 102-13 7,d= 108-143)+E A 
287 w= 102-137,d=108-143 

387 w=7 l-85,d=57-72 

486 w=20-35,d=19-32 


FBLD 

Load BCD 


See FLD. 
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FBSTP 

Store BCD and Pop 


See FST. 


FCHS 

Change Sign 


Reverses the sign of the value in ST. 


FCHS 


fchs 


87 10-17 
287 10-17 
387 24-25 
486 6 


FCLEX/FNCLEX 

Clear Exceptions 


Clears all exception flags, the busy flag, and bit 7 in the status word. 
Bit 7 is the interrupt-request flag on the 8087 and the error-status flag 
on the 80287, 80387, and 80486. The instruction has wait and no-wait 
versions. 

Note: The timings below reflect the no-wait version of the instruction. 
The wait version may take additional clock cycles. 


FCLEX 

FNCLEX 


fclex 


87 2-8 

287 2-8 

387 11 

486 7 
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FCOM/FCOMP/FCOMPP/ 

FICOM/FICOMP 

Compare 


Compares the specified source operand to ST and sets the condition 
codes of the status word according to the result. The instruction 
subtracts the source operand from ST without changing either operand. 
Memory operands can be 32- or 64-bit real numbers or 16- or 32-bit 
integers. If no operand is specified or if two pops are specified. ST is 
compared to ST(1) and the stack is popped. If one pop is specified with 
an operand, the operand is compared to ST. If one of the operands is a 
NAN, an invalid-operation exception occurs (see FUCOM for an 
alternative method of comparing on the 80387/486). 


FCOM \reg\ 

fcom 

fcom 

st (2) 

87 

287 

387 

486 

40-50 

40-50 

24 

4 

FCOMP Iregl 

fcomp 

st (7) 

87 

42-52 


fcomp 


287 

42-52 




387 

26 




486 

4 

FCOMPP 

fcompp 


87 

45-55 




287 

45-55 




387 

26 




486 

5 

FCOM memreal 

fcom 

shortreals[di] 

87 

(s=60-70,l=65-75)+EA 


fcom 

longreal 

287 

s=60-70,l=65-75 




387 

s=26,I=31 




486 

4 

FCOMP memreal 

fcomp 

longreal 

87 

(s=63-73,l=67-77)+EA 


fcomp 

shorts[di] 

287 

8=63-73,1=67-77 




387 

s=26,l=31 




486 

4 

FICOM meminl 

ficom 

double 

87 

(w=72-86,d=78-91 )+EA 


f icom 

warray[di] 

287 

w=72-86,d=78-91 




387 

w=7 l-75,d=56-63 




486 

w=l6-20,d=15-17 

FICOMP meminl 

ficomp 

WORD PTR [bp+6] 

87 

(w=74-88,d=80-93 )+EA 


ficomp 

darray[di] 

287 

w=74-88,d=80-93 




387 

w=71-75,d=56-63 




486 

w=!6-20.d= 15-17 


Condition Codes for FCOM 


C3 C2 Cl CO 
0 0 7 0 

0 0 7 1 

10 7 0 

117 1 


Meaning 
ST > source 
ST < source 
ST = source 

ST is not comparable to source 
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FCOS 

Cosine 

80387/486 Only 


Replaces a value in radians in ST with its cosine. If |ST| < 2 63 , the C2 
bit of the status word is cleared and the cosine is calculated. Otherwise, 
C2 is set and no calculation is performed. ST can be reduced to the 
required range with FPREM or FPREM1. 


FCOS 


fcos 


87 — 

287 — 

387 123-772* 

486 257-354f 


* For operands with an absolute value greater than tt/4, up to 76 additional clocks may be required, 
t For operands with an absolute value greater than jt/4, add n clocks where n = operand/(it/4). 


FDECSTP 

Decrement Stack Pointer 


Decrements the stack-top pointer in the status word. No tags or 
registers are changed, and no data is transferred. If the stack pointer is 0, 
FDECSTP changes it to 7. 


FDECSTP 

fdecstp 

87 

6-12 



287 

6-12 



387 

22 



486 

3 
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FDISI/FNDISI 

Disable Interrupts 

8087 Only 


Disables interrupts by setting the interrupt-enable mask in the control 
word. This instruction has wait and no-wait versions. Since the 80287, 
80387, and 80486 do not have an interrupt-enable mask, the instruction 
is recognized but ignored on these coprocessors. 

Note: The timings below reflect the no-wait version of the instruction. 
The wait version may take additional clock cycles. 


FDISI 

FNDISI 


fdisi 


87 2-8 

287 2 

387 2 

486 3 


FDIV/FDIVP/FIDIV 

Divide 


Divides the destination by the source and returns the quotient in the 
destination. If two register operands are specified, one must be ST. If a 
memory operand is specified, the quotient replaces the value in ST. 
Memory operands can be 32- or 64-bit real numbers or 16- or 32-bit 
integers. If no operand is specified, ST( 1) is divided by ST and the 
stack is popped, returning the result in ST. For FDIVP, the source 
must be ST; the quotient is returned in the destination register and ST 
is popped. 


FD1V | reg,reg] 

fdiv 

fdiv 

fdiv 

st, st(2) 
st (5),st 

87 

287 

387 

486 

193-203 

193-203 

to=88,fr=91 

73 

FDIVP reg.ST 

fdivp 

st(6),st 

87 

197-207 




287 

197-207 




387 

91 




486 

73 

FDIV memreal 

fdiv 

DWORD PTR [bx] 

87 

(s=215-225,l=220-230)+EA 


fdiv 

shortreal[di] 

287 

s=215-225,1=220-230 


fdiv 

longreal 

387 

s=89,l=94 




486 

73 

FIDIV memint 

f idiv 

intl6 

87 

(w=224-238,d=230-243)+EA 


f idiv 

warray[di] 

287 

w=224-238,d=230-243 


fidiv 

double 

387 

w= 136-140,d= 120-127 




486 

w=85-89,d=84-86 
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FDIVR/FDIVRP/FIDIVR 

Divide Reversed 


Divides the source by the destination and returns the quotient in the 
destination. If two register operands are specified, one must be ST. If a 
memory operand is specified, the quotient replaces the value in ST. 
Memory operands can be 32- or 64-bit real numbers or 16- or 32-bit 
integers. If no operand is specified, ST is divided by ST(1) and the 
stack is popped, returning the result in ST. For FDIVRP, the source 
must be ST; the quotient is returned in the destination register and ST 
is popped. 


FDIVR lreg,regl 

fdivr st,st(2) 
fdivr st(5),st 

87 194-204 

287 194-204 

387 to=88,fr=91 

486 73 

FDIVRP reg.ST 

fdivrp st(6),st 

87 198-208 

287 198-208 

387 91 

486 73 

FDIVR memreal 

fdivr longreal 
fdivr shortreal[di] 

87 (s=216-226,1=221-231)+EA 

287 s=216-226,1=221-231 

387 s=89,l=94 

486 73 

FIDIVR memint 

fidivr double 
fidivr warray[di] 

87 (w=225-239,d=23 l-245)+EA 
287 w=225-239,d=231-245 

387 w=135-141,d= 121-128 

486 w=85-89,d=84—86 


FENI/FNENI 

Enable Interrupts 

8087 Only 


Enables interrupts by clearing the interrupt-enable mask in the control 
word. This instruction has wait and no-wait versions. Since the 80287, 
80387, and 80486 do not have an interrupt-enable mask, the instruction 
is recognized but ignored on these coprocessors. 

Note: The timings below reflect the no-wait version of the instruction. 
The wait version may take additional clock cycles. 


FEJNI 

feni 

87 2-8 

FNENI 


287 2 



387 2 



486 3 
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FFREE 

Free Register 


Changes the specified register's tag to empty without changing the 
contents of the register. 


FFREE ST(i') 

ffree st(3) 

87 

9-16 



287 

9-16 



387 

18 



486 

3 


FIADD/FISUB/FISUBR/ 

FIMUL/FIDIV/FIDIVR 

Integer Arithmetic 

See FADD, FSUB, FSUBR, FMUL, FDIV, and FDIVR. 


FICOM/FICOMP 

Compare Integer 

See FCOM. 


FILD 

Load Integer 

See FLD. 
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FINCSTP 

Increment Stack Pointer 


Increments the stack-top pointer in the status word. No tags or registers 
are changed, and no data is transferred. If the stack pointer is 7, 
FINCSTP changes it to 0. 


FINCSTP 

fincstp 

87 

6-12 



287 

6-12 



387 

21 



486 

3 


FINIT/FNINIT 

Initialize Coprocessor 


Initializes the coprocessor and resets all the registers and flags to their 
default values. The instruction has wait and no-wait versions. On the 
80387/486, the condition codes of the status word are cleared. On the 
8087/287, they are unchanged. 

Note: The timings below reflect the no-wait version of the instruction. 
The wait version may take additional clock cycles. 


FINIT 

FNINIT 


finit 


87 2-8 

287 2-8 

387 33 

486 17 


FIST/FISTP 

Store Integer 


See FST. 
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FLD/FILD/FBLD 

Load 


Pushes the specified operand onto the stack. All memory operands are 
automatically converted to temporary-real numbers before being loaded. 
Memory operands can be 32-, 64-, or 80-bit real numbers or 16-, 32-, 
or 64-bit integers. 


FLD reg 

fid st(3) 

87 17-22 

287 17-22 

387 14 

486 4 

FLD memreal 

fid longreal 

87 (s=38-56,l=40-60,t=53-65)+EA 


fid shortarray[bx+di] 

287 s=38-56,l=40-60,t=53-65 


fid tempreal 

387 s=20,l=25,t=44 

486 s=3,l=3,t=6 

FILD memint 

fild meml6 

87 (w=46-54,d=52-60,q=60-68)+EA 


fild DWORD PTR [bx] 

287 w=46-54,d=52-60,q=60-68 


fild quads[si] 

387 w=6 l-65.d=45-52,q=56-67 

486 w= 13-16,d=9-12,q= 10-18 

FBLD membcd 

fbld packbcd 

87 (290-310)+EA 

287 290-310 

387 266-275 

486 70-103 
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FLD1/FLDZ/FLDPI/FLDL2E/ 

FLDL2T/FLDLG2/FLDLN2 

Load Constant 


Pushes a constant onto the stack. The following constants can be 
loaded: 


Instruction 

FLDl 

FLDZ 

FLDPI 

FLDL2E 

FLDL2T 

FLDLG2 

FLDLN2 


Constant 

+ 1.0 
+ 0.0 
7t 

Log 2 (e) 

Log2(10) 

Logio(2) 

Log e (2) 


FLDl 

fldl 

87 

287 

387 

486 

15-21 

15-21 

24 

4 

FLDZ 

fldz 

87 

11-17 



287 

11-17 



387 

20 



486 

4 

FLDPI 

fldpi 

87 

16-22 



287 

16-22 



387 

40 



486 

8 

FLDL2E 

fldl2e 

87 

15-21 



287 

15-21 



387 

40 



486 

8 

FLDL2T 

fldl2t 

87 

16-22 



287 

16-22 



387 

40 



486 

8 

FLDLG2 

fldlg2 

87 

18-24 



287 

18-24 



387 

41 



486 

8 

FLDLN2 

fldln2 

87 

17-23 



287 

17-23 



387 

41 



486 

8 
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FLDCW 

Load Control Word 


Loads the specified word into the coprocessor control word. The format 
of the control word is shown in the “Interpreting Coprocessor 
Instructions” section. 


FLDCW mem 16 


fldcw ctrlword 


87 (7-14)+EA 

287 7-14 

387 19 

486 4 


FLDENV/FLDENVW/FLDENVD 

Load Environment State 


Loads the 14-byte coprocessor environment state from a specified 
memory location. The environment includes the control word, status 
word, tag word, instruction pointer, and operand pointer. On the 
80387/486 in 32-bit mode, the environment state is 28 bytes. 


FLDENV mem 

fldenv [bp+10] 

87 

(35-451+EA 

FLDENVW mem* 


287 

35-45 

FLDENVD mem* 


387 

71 



486 

44,pm=34 


* 80387/486 only. 
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FMUL/FMULP/FIMUL 

Multiply 


Multiplies the source by the destination and returns the product in the 
destination. If two register operands are specified, one must be ST. If a 
memory operand is specified, the product replaces the value in ST. 
Memory operands can be 32- or 64-bit real numbers or 16- or 32-bit 
integers. If no operand is specified, ST(I) is multiplied by ST and the 
stack is popped, returning the product in ST. For FMULP, the source 
must be ST; the product is returned in the destination register and ST is 
popped. 


FMUL [reg.regj 

fmul st,st(2) 

fmul st(5),st 

87 130-145(90-105)* 

287 130-145 (90-105)* 

387 to=46-54 (49),fr=29-57 (52)t 
486 16 

FMULP ;eg.ST 

fmulp st(6),st 

87 134-148 (94-108)* 

287 134-148 (94-108)* 

387 29-57 (52)t 

486 16 

FMUL memreal 

fmul DWORD PTR [bx] 

fmul shortreal[di+3] 

fmul longreal 

87 (s=l 10—125.1= 154—168)-t-EA§ 
287 s=l 10-125,1=154—168§ 

387 s=27-35,l=32-57 

486 s=l 1,1=14 

FIMUL memint 

fimul intl6 
fimul warray[di) 
fimul double 

87 (w= 124-138,d= 130-144)+EA 
287 w= 124-138,d= 130-144 

387 w=76-87,d=61-82 

486 w=23-27,d=22-24 


* The clocks in parentheses show times for short values—those with 40 trailing zeros in their fraction 
because they were loaded from a short-real memory operand, 
t The clocks in parentheses show typical speeds. 


§ If the register operand is a short value—having 40 trailing 
from a short-real memory operand—then the timing is (1 
the 80287. 


FN instruction 

No-Wait Instructions 


Instructions that have no-wait versions include FCLEX, FDISI, FENI, 
FINIT, FSAVE, FSTCW, FSTENV, and FSTSW. Wait versions of 
instructions check for unmasked numeric errors; no-wait versions do 
not. When the .8087 directive is used, the assembler puts a WAIT 
instruction before the wait versions and a NOP instruction before the 
no-wait versions. 
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FNOP 

No Operation 


Performs no operation. FNOP can be used for timing delays or 
alignment. 


FNOP 

fnop 

87 

10-16 



287 

10-16 



387 

12 



486 

3 


FPATAN 

Partial Arctangent 


Finds the partial tangent by calculating Z = ARCTAN(Y / X). X is 
taken from ST and Y from ST(1). On the 8087/287, Y and X must be 
in the range 0 < Y < X < °o. On the 80387/486, there is no restriction 
on X and Y. X is popped from the stack and Z replaces Y in ST. 


FPATAN 

fpatan 

87 

250-800 



287 

250-800 



387 

314-487 



486 

218-303 
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FPREM 

Partial Remainder 


Calculates the remainder of ST divided by ST(1), returning the result in 
ST. The remainder retains the same sign as the original dividend. The 
calculation uses the following formula: 

remainder = ST - ST(1) * quotient 

The quotient is the exact value obtained by chopping ST / ST(1) 
toward 0. The instruction is normally used in a loop that repeats until 
the reduction is complete, as indicated by the condition codes of the 
status word. 


FPREM 

fprem 

87 

15-190 



287 

15-190 



387 

74-155 



486 

70-138 


Condition Codes for FPREM and FPREM1 


C3 C2 Ci CO 

? 1 ? ? 

0 0 0 0 

0 0 0 1 

0 0 10 

0 0 11 

10 0 0 

10 0 1 

10 10 

10 11 


Meaning 

Incomplete reduction 
quotient MOD 8 = 0 
quotient MOD 8 = 4 
quotient MOD 8 = 1 
quotient MOD 8 = 5 
quotient MOD 8 = 2 
quotient MOD 8 = 6 
quotient MOD 8 = 3 
quotient MOD 8 = 7 
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FPREM1 

Partial Remainder (IEEE Compatible) 

80387/486 Only 


Calculates the remainder of ST divided by ST(1), returning the result in 
ST. The remainder retains the same sign as the original dividend. The 
calculation uses the following formula: 

remainder = ST - ST(1) * quotient 

The quotient is the integer nearest to the exact value of ST / ST(1). 
When two integers are equally close to the given value, the even 
integer is used. The instruction is normally used in a loop that repeats 
until the reduction is complete, as indicated by the condition codes of 
the status word. See FPREM for the possible condition codes. 


FPREMl 

fpreml 

87 

— 



287 

— 



387 

95-185 



486 

72-167 


FPTAN 

Partial Tangent 

Finds the partial tangent by calculating Y / X = TAN(Z). Z is taken 
from ST. Z must be in the range 0 < Z < rc / 4 on the 8087/287. On 
the 80387/486, |Z| must be less than 2 63 . The result is the ratio Y / X. 
Y replaces Z, and X is pushed into ST. Thus, Y is returned in ST(1) 
and X in ST. 


FPTAN 


87 30-540 

287 30-540 

387 191-497* 

486 200-2731 


* For operands with an absolute value greater than tt/4, up to 76 additional clocks may be required, 
t For operands with an absolute value greater than it/4, add n clocks where n = operand/! n/4). 
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FRNDINT 

Round to Integer 


Rounds ST from a real number to an integer. The rounding control 
(RC) field of the control word specifies the rounding method, as shown 
in the introduction to this section. 


FRNDINT 


frndint 


87 16-50 
287 16-50 
387 66-80 
486 21-30 


FRSTOR/FRSTORW/FRSTORD 

Restore Saved State 


Restores the 94-byte coprocessor state to the coprocessor from the 
specified memory location. In 32-bit mode on the 80387/486, the 
environment state takes 108 bytes. 


FRSTOR mem 

frstor [bp-94] 

87 

(197-207)+EA 

FRSTORW mem* 


287 

t 

FRSTORD mem* 


387 

308 



486 

131,pm=120 


* 80387/486 only. 

t Clock counts are not meaningful in determining overall execution time of this instruction. Timing is 
determined by operand transfers. 
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FSAVE/FSAVEW/FSAVED 

FNSAVE/FNSAVEW/FNSAVED 

Save Coprocessor State 


Stores the 94-byte coprocessor state to the specified memory location. 
In 32-bit mode on the 80387/486, the environment state takes 108 
bytes. This instruction has wait and no-wait versions. After the save, 
the coprocessor is initialized as if FINIT had been executed. 

Note: The timings below reflect the no-wait version of the instruction. 
The wait version may take additional clock cycles. 


FSAVE mem 

fsave [bp-94] 

87 

(197-207)+E A 

FSAVEW mem* 

fsave cobuffer 

287 

t 

FSAVED mem* 


387 

375-376 

FNSAVE mem 
FNSAVEW mem* 
FNSAVED mem* 


486 

154,pm=143 


* 80387/486 only. 

t Clock counts are not meaningful in determining overall execution time of this instruction. Timing is 
determined by operand transfers. 


FSCALE 

Scale 


Scales by powers of 2 by calculating the function Y = Y * 2 X . X is the 
scaling factor taken from ST(1), and Y is the value to be scaled from 
ST. The scaled result replaces the value in ST. The scaling factor 
remains in ST(1). If the scaling factor is not an integer, it will be 
truncated toward zero before the scaling. 

On the 8087/287, if X is not in the range -2 15 < X < 2 15 or if X is in 
the range 0 < X < 1, the result will be undefined. The 80387/486 have 
no restrictions on the range of operands. 


FSCALE 


fscale 


87 32-38 
287 32-38 
387 67-86 
486 30-32 
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FSETPM 

Set Protected Mode 

80287 Only 


Sets the 80287 to protected mode. The instruction and operand pointers 
are in the protected-mode format after this instruction. On the 
80387/486, FSETPM is recognized but interpreted as FNOP, since the 
80386/486 processors handle addressing identically in real and protected 
mode. 


FSETPM 

fsetpm 

87 

— 



287 

2-8 



387 

12 



486 

3 


FSIN 

Sine 

80387/486 Only 


Replaces a value in radians in ST with its sine. If |ST| < 2 63 , the C2 
bit of the status word is cleared and the sine is calculated. Otherwise, 
C2 is set and no calculation is performed. ST can be reduced to the 
required range with FPREM or FPREM1. 


FSIN 




87 — 

287 — 

387 122-771* 

486 257-354t 


* For operands with an absolute value greater than n/4, up to 76 additional clocks may be required, 
t For operands with an absolute value greater than n/4, add n clocks where n = operand/!n/4). 
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FSINCOS 

Sine and Cosine 

80387/486 Only 


Computes the sine and cosine of a radian value in ST. The sine 
replaces the value in ST, and then the cosine is pushed onto the stack. 
If |ST| < 2 63 , the C2 bit of the status word is cleared and the sine and 
cosine are calculated. Otherwise, C2 is set and no calculation is 
performed. ST can be reduced to the required range with FPREM or 
FPREM1. 


FSINCOS 


fsincos 


87 — 

287 — 

387 194-809* 

486 292-365+ 


* For operands with an absolute value greater than 7t/4, up to 76 additional clocks may be required. 
+ For operands with an absolute value greater than rc/4, add n clocks where n = operand/!jt/4). 


FSQRT 

Square Root 


Replaces the value of ST with its square root. (The square root of -0 
is -0.) 


FSQRT 

fsqrt 

87 

180-186 



287 

180-186 



387 

122-129 



486 

83-87 
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FST/FSTP/FIST/FISTP/FBSTP 

Store 


Stores the value in ST to the specified memory location or register. 
Temporary-real values in registers are converted to the appropriate 
integer, BCD, or floating-point format as they are stored. With FSTP, 
FISTP, and FBSTP, the ST register value is popped off the stack. 
Memory operands can be 32-, 64-, or 80-bit real numbers for FSTP or 
16-, 32-, or 64-bit integers for FISTP. 


FST reg 

fst 
f St 

st (6) 

87 

287 

387 

486 

15-22 

15-22 

11 

3 

FSTP reg 

fstp 

St 

87 

17-24 


fstp 

St (3) 

287 

17-24 




387 

12 




486 

3 

FST memreal 

fst 

shortreal 

87 

(s=84-90,l=96-104)+EA 


fst 

longs[bx] 

287 

s=84-90,1=96-104 




387 

s=44,l=45 




486 

s=7,l=8 

FSTP memreal 

fstp 

longreal 

87 

(s=86-92,l=98-106,t=52-58)+EA 


fstp 

tempreals[bx] 

287 

s=86-92,l=98-106,1=52-58 




387 

s=44,l=45,t=53 




486 

s=7,l=8,t=6 

FIST memint 

fist 

inti 6 

87 

(w=80-90,d=82-92)+EA 


fist 

doubles[8] 

287 

w=80-90,d=82-92 




387 

w=82-95,d=79-93 




486 

w=29-34,d=28-34 

FISTP memint 

fistp 

longint 

87 

(w=82-92,d=84-94,q=94-105 )+E A 


fistp 

doubles[bx] 

287 

w=82-92,d=84-94,q=94-105 




387 

w=82-95,d=79-93,q=80-97 




486 

29-34 

FBSTP membcd 

fbstp 

beds [bx] 

87 

(520-5401+EA 




287 

520-540 




387 

512-534 




486 

172-176 
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FSTCW/FNSTCW 

Store Control Word 


Stores the control word to a specified 16-bit memory operand. This 
instruction has wait and no-wait versions. 

Note: The timings below reflect the no-wait version of the instruction. 
The wait version may take additional clock cycles. 


FSTCW memI6 
FNSTCW meml6 


fstcw ctrlword 


87 12-18 

287 12-18 

387 15 

486 3 


FSTENV/FSTENVW/FSTENVD 

FNSTENV/FNSTENVW/FNSTENVD 

Store Environment State 


Stores the 14-byte coprocessor environment state to a specified 
memory location. The environment state includes the control word, 
status word, tag word, instruction pointer, and operand pointer. On the 
80387/486 in 32-bit mode, the environment state is 28 bytes. 

Note: The timings below reflect the no-wait version of the instruction. 
The wait version may take additional clock cycles. 


FSTENV mem 

fstenv [bp-14] 

87 

(40-50)+EA 

FSTENVW mem* 


287 

40-50 

FSTENVD mem* 


387 

103-104 

FNSTENV mem 
FNSTENVW mem* 
FNSTENVD mem* 


486 

67,pm=56 


* 80387/486 only. 
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FSTSW/FNSTSW 

Store Status Word 


Stores the status word to a specified 16-bit memory operand. On the 
80287, 80387, and 80486, the status word can also be stored to the 
processor's AX register. This instruction has wait and no-wait versions. 

Note: The timings below reflect the no-wait version of the instruction. 
The wait version may take additional clock cycles. 


FSTSW mem/6 
FNSTSW mem/6 


FSTSW AX 
FNSTSW AX 






87 

287 

387 

486 

87 

287 

387 

486 


12-18 

12-18 

15 


10-16 

13 


FSUB/FSUBP/FISUB 

Subtract 


Subtracts the source operand from the destination operand and returns 
the difference in the destination operand. If two register operands are 
specified, one must be ST. If a memory operand is specified, the result 
replaces the value in ST. Memory operands can be 32- or 64-bit real 
numbers or 16- or 32-bit integers. If no operand is specified, ST is 
subtracted from ST( 1) and the stack is popped, returning the difference 
in ST. For FSUBP, the source must be ST; the difference (destination 
minus source) is returned in the destination register and ST is popped. 


FSUB Iregjregl 

fsub 

fsub 

fsub 

st, st(2) 
st(5),st 

87 

287 

387 

486 

70-100 

70-100 

to=29-37,fr=26-34 

8-20 

FSUBP reg, ST 

fsubp 

st(6),st 

HI 

75-105 




287 

75-105 




387 

26-34 




486 

8-20 

FSUB memreal 

fsub 

longreal 

87 

(s=90-120,s=95-125 )+EA 


fsub 

shortreals[di] 

287 

s=90-120,1=95-125 




387 

s=24-32,l=28-36 




486 

8-20 

FISUB memint 

fisub 

double 

87 

(w= 102-13 7 ,d= 108143 )+E A 


fisub 

warray[di] 

287 

w= 102-137,d= 108-143 




387 

w=71 -83,d=57-82 




486 

w=20-35,d= 19-32 
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FSUBR/FSUBRP/FISUBR 

Subtract Reversed 


Subtracts the destination operand from the source operand and returns 
the result in the destination operand. If two register operands are 
specified, one must be ST. If a memory operand is specified, the result 
replaces the value in ST. Memory operands can be 32- or 64-bit real 
numbers or 16- or 32-bit integers. If no operand is specified, ST(1) is 
subtracted from ST and the stack is popped, returning the difference in 
ST. For FSUBRP, the source must be ST; the difference (source 
minus destination) is returned in the destination register and ST is 
popped. 


FSUBR lreg,reg) 

fsubr st, st(2) 
fsubr st(5),st 
fsubr 

87 70-100 

287 70-100 

387 to=29-37,fr=26-34 

486 8-20 

FSUBRP reg ,ST 

fsubrp st(6),st 

87 75-105 

287 75-105 

387 26-34 

486 8-20 

FSUBR memreal 

fsubr QWORD PTR [bx] 
fsubr shortreal[di] 
fsubr longreal 

87 (s=90-120,s=95-125)+E A 

287 s=90-120,l=95-125 

387 s=25-33,l=29-37 

486 8-20 

FISUBR memini 

fisubr intl6 
fisubr warrayfdi] 
fisubr double 

87 (w= 103-139,d=109-144)+E A 
287 w= 103-139,d= 109-144 

387 w=72-84,d=58-83 

486 w=20-55.d=19-32 
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FTST 

Test for Zero 


Compares ST with +0.0 and sets the condition of the status word 
according to the result. 


FTST 


ft st 


87 38—48 

287 38-48 

387 28 

486 4 


Condition Codes for FTST 


C3 C2 C_L CO 

0 0 ? 0 

0 0 ? 1 

1 0 ? 0 

1 1 ? 1 


Meaning 
ST is positive 
ST is negative 
ST is 0 

ST is not comparable (NAN or projective 
infinity) 
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FUCOM/FUCOMP/FUCOMPP 

Unordered Compare 

80387/486 Only 


Compares the specified source to ST and sets the condition codes of the 
status word according to the result. The instruction subtracts the source 
operand from ST without changing either operand. Memory operands 
are not allowed. If no operand is specified or if two pops are specified, 
ST is compared to ST(1). If one pop is specified with an operand, the 
given register is compared to ST. 

Unlike FCOM, FUCOM does not cause an invalid-operation exception 
if one of the operands is NAN. Instead, the condition codes are set to 
unordered. 


FUCOM ireg) 

fucom st(2) 
fucom 

87 

287 

387 

486 

24 

4 

FUCOMP lreg\ 

fucomp st (7) 

87 

— 


fucomp 

287 

— 



387 

26 



486 

4 

FUCOMPP 

fucompp 

87 




287 

— 



387 

26 



486 

5 


Condition Codes for FUCOM 


C3 C2 Ci CO 

0 0 ? 0 

0 0 ? 1 

1 0 ? 0 

1 1 ? 1 


Meaning 
ST > source 
ST < source 
ST = source 
Unordered 


FWAIT 

Wait 


Suspends execution of the processor until the coprocessor is finished 
executing. This is an alternate mnemonic for the processor WAIT 
instruction. 


FWAIT 


fwait 


87 4 

287 3 

387 6 

486 1-3 
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FXAM 

Examine 

Reports the contents of ST in the condition flags of the status word. 

FXAM 


87 12-23 

287 12-23 

387 30-38 

486 8 

Condition 

Codes 

for FXAM 


C3 C2 

ci 

CO Meaning 


0 0 

0 

0 

+ Unnormal* 


0 0 

0 

1 

+ NAN 


0 0 

1 

0 

- Unnormal* 


0 0 

1 

1 

-NAN 


0 1 

0 

0 

+ Normal 


0 1 

0 

1 

+ Infinity 


0 1 

1 

0 

- Normal 


0 1 

1 

1 

- Infinity 


1 0 

0 

0 

+ 0 


1 0 

0 

1 

Empty 


1 0 

1 

0 

- 0 


1 0 

1 1 

1 

0 

1 

0 

Empty 
+ Denormal 


1 1 

1 1 

0 

1 

1 

0 

Empty* 

- Denormal 


1 1 

1 

1 

Empty* 


* Not used on the 80387/486. Unnormals are not supported by the 80387/486. Also, the 80387/486 use 

two codes instead of four to identify empty registers. 






FXCH 





Exchange Registers 

Exchanges the specified (destination) register and ST. If no operand is 

specified, ST and ST( 1) are exchanged. 


FXCH [reg] 



fxch st (3) 

87 10-15 




fxch 

287 10-15 

387 18 

486 4 
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FXTRACT 

Extract Exponent and Significand 


Extracts the exponent and significand (mantissa) fields of ST. The 
exponent replaces the value in ST, and then the significand is pushed 
onto the stack. 


FXTRACT 


fxtract 


87 27-55 
287 27-55 
387 70-76 
486 16-20 


FYL2X 

Y log 2 (X) 


Calculates Z = Y log 2 (X). X is taken from ST and Y from ST(1). The 
stack is popped, and the result, Z, replaces Y in ST. X must be in the 
range 0 < X < °° and Y in the range < Y < «». 


FYL2X 

fy!2x 

87 

900-1100 



287 

900-1100 



387 

120-538 



486 

196-329 


FYL2XP1 

Y log 2 (X+1) 


Calculates Z = Y log 2 (X + 1). X is taken from ST and Y from ST(1). 
The stack is popped once, and the result, Z, replaces Y in ST. X must 
be in the range 0 < |X| < (1 - (V2 / 2)). Y must be in the range 
-OO < Y < °°. 


FYL2XP1 

fy!2xpl 

87 

700-1000 



287 

700-1000 



387 

257-547 



486 

171-326 
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ASCII Chart 
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DOS Program Segment Prefix (PSP) 



0 1 

23456789AB 

C D E F 

OOh 

1 

2 I 3 I 4 1 IP ? CS 1 IP 

lOh 

6 

CS 

IP 7 \ CS 1 

20h 



L?J 

30h 


3 


40h 




50h 

9 

10 

60h 

10 

ii 

70h 

11 

3 

80h 


13 


90h 




AOh 




BOh 




COh 




DOh 




EOh 




FOh 





1 Opcode for INT 20h 

2 Segment of first allocatable address following the program (useful for 
memory allocation) 

3 Reserved or used by DOS 

4 Opcode for far call to DOS function dispatcher 

5 Vector for terminate routine 

6 Vector for ctrl+break routine 

7 Vector for error routine 

8 Segment of program’s copy of the environment 

9 Opcode for DOS INT 21 h and far return (you can do a far call to this 

address to execute DOS calls) 

10 First command-line argument (formatted as uppercase 11-character 
file name) 

11 Second command-line argument (formatted as uppercase 11-character 
file name) 

12 Number of bytes in command-line argument 

13 Unformatted command line and/or default Disk Transfer Area (DTA) 
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ASCII Codes 


Dec 

Hex Char 

64 

40 

P 

65 

41 

A 

66 

42 

B 

67 

43 

C 

68 

44 

D 

69 

45 

E 

70 

46 

F 

71 

47 

G 

72 

48 

H 

73 

49 

I 

74 

4A 

J 

75 

4B 

X 

76 

4C 

L 

77 

4D 

M 

78 

4E 

N 

79 

4F 

0 

80 

50 

P 

81 

51 

Q 

82 

52 

R 

83 

53 

S 

84 

54 

T 

85 

55 

U 

86 

56 

U 

87 

57 

u 

88 

58 

X 

89 

59 

y 

90 

5 A 

z 

91 

5B 

[ 

92 

5C 

\ 

93 

5D 

] 

94 

5E 

A 

95 

5F 

_ 


Dec 

Hex Char 

96 

60 


97 

61 

a 

98 

62 

h 

99 

63 

c 

100 

64 

a 

101 

65 

e 

102 

66 

f 

103 

67 

Sf 

104 

68 

h 

105 

69 

i 

106 

6A 

j 

107 

6B 

k 

108 

6C 

1 

109 

6D 

H 

110 

6E 

n 

111 

6F 

0 

112 

70 

P 

113 

71 

q 

1 14 

72 

r 

115 

73 

s 

116 

74 

t 

117 

75 

u 

118 

76 

V 

119 

77 

w 

120 

78 

X 

121 

79 

a 

122 

7A 

z 

123 

7B 

{ 

124 

7C 

! 

125 

7D 

> 

126 

7E 

- 

127 

7F 



Ctrl 

Dec 

Hex Char 

Code 

*@ 

0 

00 


NUL 

A 

1 

01 

0 

SOH 

‘B 

2 

02 

0 

STX 

"c 

3 

03 

¥ 

ETX 

D 

4 

04 

♦ 

EOT 

‘E 

5 

05 

* 

ENQ 

F 

6 

06 


ACK 

G 

7 

07 

• 

BEL 

*H 

8 

08 

□ 

BS 

‘l 

9 

09 

0 

HT 

‘J 

10 

0A 

0 

LF 

K 

11 

0B 

d 

VT 

L 

12 

OC 

2 

FF 


13 

OD 

f 

CR 

“N 

14 

OE 


SO 

‘o 

15 

OF 

8 

SI 

‘p 

16 

10 

► 

DLE 

Q 

17 

11 

i 

DC1 

R 

18 

12 

X 

DC2 

's 

19 

13 

n 

DC3 

“T 

20 

14 


DC4 

"u 

21 

15 

ff 

NAK 

"v 

22 

16 

■ 

SYN 

*w 

23 

17 

i 

ETB 

X 

24 

18 

t 

CAN 

‘y 

25 

19 

x 

EM 

z 

26 

IA 

4 

SUB 

■[ 

27 

IB 

f 

ESC 

\ 

28 

1C 

L 

FS 

J. 

29 

ID 

# 

GS 


30 

IF 

A 

RS 


31 

11- 


US 


Dec 

Hex Char 

32 

33 

20 

21 

t 

34 

22 

" 

35 

23 

# 

36 

24 

$ 

37 

25 

V. 

38 

26 

« 

39 

2 ~ 

/ 

40 

28 

( 

41 

29 

) 

42 

2A 

* 

43 

2B 

+ 

44 

2C 

I 

45 

2D 

- 

46 

2E 

. 

47 

2F 

/ 

48 

30 

0 

49 

31 

1 

50 

32 

2 

51 

33 

3 

52 

34 

4 

53 

35 

5 

54 

36 

6 

55 

37 

7 

56 

38 

8 

57 

39 

9 

58 

3 A 

; 

59 

3B 

; 

60 

3C 

< 

61 

3D 

i 

62 

3E 

> 

63 

3F 

? 


t ASCII code 127 has the code DEL. Under DOS. this code has the same effect as ASCII 8 (BS). 
The DEL code can be generated by the CTRL + BKSP key combination. 
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Dec Hex Char 

192 

CO 

L 

193 

Cl 

1 

194 

C2 

T 

195 

C3 

1- 

196 

C4 

- 

197 

C5 

+ 

198 

C6 


199 

C7 


200 

C8 

l! 

201 

C9 

Ir 

202 

CA 

Jl 

203 

CB 

TT 

204 

cx: 

If 

205 

CD 

= 

206 

CE 

ji 

ir 

207 

CE 

X 

208 

DO 

il 

209 

D1 

T 

210 

D2 

IT 

211 

D3 

11 

212 

D4 

fc 

213 

1)5 

F 

214 

D6 

IT 

215 

D7 


216 

D8 

+ 

217 

D9 

J 

218 

DA 

r 

219 

DB 

1 

220 

DC 

■ 

221 

DD 

1 

222 

DE 

| 

223 

DE 

■ 


Dec Hex Char 

160 

AO 

a 

161 

A1 

i 

162 

A2 

6 

163 

A3 

u 

164 

A4 

n 

165 

A5 

N 

166 

A6 

« 

16^ 

A7 

0 

168 

A8 

L 

169 

A9 

r 

170 

AA 

T 

171 

AB 

* 

172 

AC 

« 

173 

AD 

i 

174 

AE 

« 

175 

AF 

» 

176 

BO 


177 

B1 

£ 

178 

B2 


179 

B3 

1 

180 

B4 


181 

B5 


182 

B6 

\\ 

183 

B7 

u 

184 

B8 


185 

B9 

}| 

186 

BA 

|| 

187 

BB 

il 

188 

BC 

il 

189 

BD 

il 

190 

BE 

i 

191 

BE 

•i 


Dec 

Hex Char 

224 

EO 

a 

225 

El 

P 

226 

E2 

r 

22“’ 

E3 

n 

228 

E4 

E 

229 

E5 

ff 

230 

E6 

p 

231 

E7 

T 

232 

E8 

5 

233 

E9 

e 

234 

EA 

(1 

235 

EB 

6 

236 

EC 

® 

237 

ED 

* 

238 

EE 

6 

239 

EF 

n 

240 

FO 

= 

241 

FI 

+ 

242 

F2 

> 

243 

F3 

< 

244 

F4 

f 

245 

F5 

J 

246 

F6 

7 

247 

F7 

z 

248 

F8 

• 

249 

F9 

. 

250 

FA 


251 

FB 


252 

FC 

R 

253 

FD 

l 

254 

FE 

1 

255 

FF 



Dec 

Hex Char 

128 

80 

5 

129 

81 

u 

130 

82 

e 

131 

83 

3 

132 

84 

a 

133 

85 

a 

134 

86 

4 

135 

87 

$ 

136 

88 

? 

137 

89 

e 

138 

8A 

e 

139 

8B 

l 

140 

8C 

T 

141 

8D 

i 

142 

8E 

A 

143 

8F 

A 

144 

90 

i 

145 

91 

a 

146 

92 

ff 

147 

93 

0 

148 

94 

o 

149 

95 

o 

150 

96 

u 

151 

97 

ii 

152 

98 

y 

153 

99 

a 

154 

9A 

u 

155 

9B 


156 

9C 

£ 

157 

9D 

¥ 

158 

9E 

R 

159 

9F 
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Key Codes 


Key 

Scan 

Code 

ASCII or 
Extended 1 

ASCII or 
Extended + 
with SHIFT 

ASCII or 
Extended 1, 
with CTRL 

ASCII or 
Extended 1 
with ALT 


Dec Hex 

Dec 

Hex Char 

Dec 

Hex 

Char 

Dec 

Hex Char 

Dec 

Hex 

Char 

ESC 

1 

01 

27 

IB 

ESC 

27 

IB 

ESC 

27 

IB 

ESC 

1 

01 

NULS 

1 ! 

2 

02 

49 

31 

1 

33 

21 

! 




120 

78 

NUL 

2 @ 

3 

03 

50 

32 

2 

64 

40 

0 

3 

03 

NUL 

121 

79 

NUL 

3# 

4 

04 

51 

33 

3 

35 

23 

# 




122 

7A 

NUL 

4$ 

5 

05 

52 

34 

4 

36 

24 

$ 




123 

7B 

NUL 

5% 

6 

06 

53 

35 

5 

37 

25 

% 




124 

1C 

NUL 

6 A 

7 

07 

54 

36 

6 

94 

5E 

A 

30 

IE 

RS 

125 

7D 

NUL 

7 & 

8 

08 

55 

37 

7 

38 

26 

& 




126 

7E 

NUL 

8* 

9 

09 

56 

38 

8 

42 

2A 

* 




127 

7F 

NUL 

9< 

10 

0A 

57 

39 

9 

40 

28 

( 




128 

80 

NUL 

0) 

11 

0B 

48 

30 

0 

41 

29 

) 




129 

81 

NUL 


12 

OC 

45 

2D 

- 

95 

5F 

- 

31 

IF 

US 

130 

82 

NUL 

= + 

13 

OD 

61 

3D 

= 

43 

2B 

+ 




131 

83 

NUL 

BKSP 

14 

OE 

8 

08 


8 

08 


127 

7F 


14 

OE 

NUL§ 

TAB 

15 

OF 

9 

09 


15 

OF 

NUL 

148 

94 

NUL§ 

15 

A5 

NULS 

Q 

16 

10 

113 

71 

q 

81 

51 

Q 

17 

11 

DC1 

16 

10 

NUL 

W 

17 

1 1 

119 

77 


87 

57 

w 

23 

17 

ETB 

17 

11 

NUL 

E 

18 

12 

101 

65 

e 

69 

45 

E 

5 

05 

ENQ 

18 

12 

NUL 

R 

19 

13 

114 

72 

r 

82 

52 

R 

18 

12 

DC2 

19 

13 

NUL 

T 

20 

14 

116 

74 

t 

84 

54 

T 

20 

14 

SO 

20 

14 

NUL 

Y 

21 

15 

121 

79 

y 

89 

59 

Y 

25 

19 

EM 

21 

15 

NUL 

U 

22 

16 

117 

75 


85 

55 

U 

21 

15 

NAK 

22 

16 

NUL 

I 

23 

17 

105 

69 

i 

73 

49 

I 

9 

09 

TAB 

23 

17 

NUL 

o 

24 

18 

III 

6F 

o 

79 

4F 

0 

15 

OF 

SI 

24 

18 

NUL 

p 

25 

19 

112 

70 

P 

80 

50 

p 

16 

10 

DLE 

25 

19 

NUL 

[ 1 

26 

IA 

91 

5B 

[ 

123 

7B 

{ 

27 

IB 

ESC 

26 

IA 

NULS 

11 

27 

IB 

93 

5D 

] 

125 

7D 

> 

29 

ID 

GS 

27 

IB 

NULS 

ENTER 

28 

1C 

13 

OD 

CR 

13 

OD 

CR 

10 

OA 

LF 

28 

1C 

NUL§ 

ENTER£ 

28 

1C 

13 

OD 

CR 

13 

OD 

CR 

10 

OA 

LF 

166 

A6 

NUL§ 

L CTRL 

29 

ID 













R CTRL£ 

29 

ID 













A 

30 

IE 

97 

61 

a 

65 

41 

A 

1 

01 

SOH 

30 

IE 

NUL 

S 

31 

IF 

115 

73 

s 

83 

53 

S 

19 

13 

DC3 

31 

IF 

NUL 

D 

32 

20 

100 

64 

d 

68 

44 

D 

4 

04 

EOT 

32 

20 

NUL 

F 

33 

21 

102 

66 

f 

70 

46 

F 

6 

06 

ACK 

33 

21 

NUL 

G 

34 

22 

103 

67 

g 

71 

47 

G 

7 

07 

BEL 

34 

22 

NUL 

H 

35 

23 

104 

68 

h 

72 

48 

H 

8 

08 

BS 

35 

23 

NUL 

J 

36 

24 

106 

6A 

j 

74 

4A 

J 

10 

OA 

LF 

36 

24 

NUL 

K 

37 

25 

107 

6B 

k 

75 

4B 

K 

11 

OB 

VT 

37 

25 

NUL 

L 

38 

26 

108 

6C 

1 

76 

4C 

L 

12 

OC 

FF 

38 

26 

NUL 


39 

27 

59 

3B 


58 

3A 





39 

27 

NULS 


40 

28 

39 

27 


34 

22 





40 

28 

NULS 

~ 

41 

29 

96 

60 


126 

7E 

~ 




41 

29 

NULS 

L SHIFT 

42 

2A 













\| 

43 

2B 

92 

5C 

\ 

124 

7C 

1 

28 

1C 

FS 




Z 

44 

2C 

122 

7A 

z 

90 

5A 

Z 

26 

IA 

SUB 

44 

2C 

NUL 

X 

45 

2D 

120 

78 

X 

88 

58 

X 

24 

18 

CAN 

45 

2D 

NUL 

c 

46 

2E 

99 

63 

c 

67 

43 

c 

3 

03 

ETX 

46 

2E 

NUL 

V 

47 

2F 

118 

76 

V 

86 

56 

V 

22 

16 

SYN 

47 

2F 

NUL 

B 

48 

30 

98 

62 

b 

66 

42 

B 

2 

02 

STX 

48 

30 

NUL 

N 

49 

31 

no 

6E 

n 

78 

4E 

N 

14 

OE 

SO 

49 

31 

NUL 

M 

50 

32 

109 

6D 

m 

77 

4D 

M 

13 

OD 

CR 

50 

32 

NUL 

, < 

51 

33 

44 

2C 


60 

3C 

< 




51 

33 

NULS 

. > 

52 

34 

46 

2E 


62 

3E 

> 




52 

34 

NULS 

/? 

53 

35 

47 

2F 

/ 

63 

3F 

? 




53 

35 

NULS 

GRAY /£ 

53 

35 

47 

2F 

/ 

63 

3F 

? 

149 

95 

NUL 

164 

A4 

NUL 
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Key 

Scan 

Code 

ASCII or 
Extended* 

ASCII or 
Extended* 
with SHIFT 

ASCII or 
Extended* 
with CTRL 

ASCII or 
Extended* 
with ALT 


Dec Hex 

Dec 

Hex 

Char 

Dec 

Hex 

Char 

Dec 

Hex 

Char 

Dec 

Hex 

Char 

R SHIFT 

54 

36 













* PRTSC 

55 

37 

42 

2A 

* 

PRTSC 

tt 

114 

72 

0 




L ALT 

56 

38 













R ALT£ 

56 

38 













SPACE 

57 

39 

32 

20 

SPC 

32 

20 

SPC 

32 

20 

SPC 

32 

20 

SPC 

CAPS 

58 

3A 













FI 

59 

3B 

59 

3B 

NUL 

84 

54 

NUL 

94 

5E 

NUL 

104 

68 

NUL 

F2 

60 

3C 

60 

3C 

NUL 

85 

55 

NUL 

95 

5F 

NUL 

105 

69 

NUL 

F3 

61 

3D 

61 

3D 

NUL 

86 

56 

NUL 

96 

60 

NUL 

106 

6A 

NUL 

F4 

62 

3E 

62 

3E 

NUL 

87 

57 

NUL 

97 

61 

NUL 

107 

6B 

NUL 

F5 

63 

3F 

63 

3F 

NUL 

88 

58 

NUL 

98 

62 

NUL 

108 

6C 

NUL 

F6 

64 

40 

64 

40 

NUL 

89 

59 

NUL 

99 

63 

NUL 

109 

6D 

NUL 

F7 

65 

41 

65 

41 

NUL 

90 

5A 

NUL 

100 

64 

NUL 

110 

6E 

NUL 

F8 

66 

42 

66 

42 

NUL 

91 

5B 

NUL 

101 

65 

NUL 

111 

6F 

NUL 

F9 

67 

43 

67 

43 

NUL 

92 

5C 

NUL 

102 

66 

NUL 

112 

70 

NUL 

F10 

68 

44 

68 

44 

NUL 

93 

5D 

NUL 

103 

67 

NUL 

113 

71 

NUL 

FI 1£ 

87 

57 

133 

85 

E0 

135 

87 

EO 

137 

89 

EO 

139 

8B 

EO 

FI2£ 

88 

58 

134 

86 

E0 

136 

88 

EO 

138 

8A 

EO 

140 

8C 

EO 

NUM 

69 

45 













SCROLL 

70 

46 













HOME 

71 

47 

71 

47 

NUL 

55 

37 

7 

119 

77 

NUL 




HOME£ 

71 

47 

71 

47 

E0 

71 

47 

EO 

119 

77 

EO 

151 

97 

NUL 

UP 

72 

48 

72 

48 

NUL 

56 

38 

8 

141 

8D 

NUL§ 




UP£ 

72 

48 

72 

48 

E0 

72 

48 

EO 

141 

8D 

EO 

152 

98 

NUL 

PGUP 

73 

49 

73 

49 

NUL 

57 

39 

9 

132 

84 

NUL 




PGUP£ 

73 

49 

73 

49 

EO 

73 

49 

EO 

132 

84 

EO 

153 

99 

NUL 

GRAY- 

74 

4A 




45 

2D 








LEFT 

75 

4B 

75 

4B 

NUL 

52 

34 

4 

115 

73 

NUL 




LEFT£ 

75 

4B 

75 

4B 

EO 

75 

4B 

EO 

115 

73 

EO 

155 

9B 

NUL 

CENTER 

76 

4C 




53 

35 

5 







RIGHT 

77 

4D 

77 

4D 

NUL 

54 

36 

6 

116 

74 

NUL 




RIGHT£ 

77 

4D 

77 

4D 

EO 

77 

4D 

EO 

116 

74 

EO 

157 

9D 

NUL 

GRAY + 

78 

4E 




43 

2B 

+ 







END 

79 

4F 

79 

4F 

NUL 

49 

31 

1 

117 

75 

NUL 




END£ 

79 

4F 

79 

4F 

EO 

79 

4F 

EO 

117 

75 

EO 

159 

9F 

NUL 

DOWN 

80 

50 

80 

50 

NUL 

50 

32 

2 

145 

91 

NUL§ 




DOWN£ 

80 

50 

80 

50 

EO 

80 

50 

EO 

145 

91 

EO 

160 

AO 

NUL 

PGDN 

81 

51 

81 

51 

NUL 

51 

33 

3 

118 

76 

NUL 




PGDN£ 

81 

51 

81 

51 

EO 

81 

51 

EO 

118 

76 

EO 

161 

A1 

NUL 

INS 

82 

52 

82 

52 

NUL 

48 

30 

0 

146 

92 

NULS 




INS£ 

82 

52 

82 

52 

EO 

82 

52 

EO 

146 

92 

EO 

162 

A2 

NUL 

DEL 

83 

53 

83 

53 

NUL 

46 

2E 


147 

93 

NUL§ 




DEL£ 

83 

53 

83 

53 

EO 

83 

53 

EO 

147 

93 

EO 

163 

A3 

NUL 


t Extended codes return 0 (NUL) or EO (decimal 224) as the initial 
character. This is a signal that a second (extended) code is available in 
the keystroke buffer. 

§ These key combinations are only recognized on extended keyboards. 

£ These keys are only available on extended keyboards. Most are in the 
Cursor/Control cluster. If the raw scan code is read from the keyboard port 
(60h). it appears as two bytes (EOh) followed by the normal scan code. 
However, when the keypad ENTER and / keys are read through the BIOS 
interrupt I6h, only EOh is seen since the interrupt only gives one-byte 
scan codes. 

tt Under DOS. SHIFT+PRTSCR causes interrupt 5. which prints the screen. 
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Color Display Attributes 


Background Foreground 

Bits_Num Color_Bits*_Num Color 


I RGB 
0 0 0 0 0 


F R G B 
0 0 0 0 0 

0 0 0 1 1 

0 0 10 2 

0 0 11 3 

0 10 0 4 

0 10 1 5 

0 110 6 

0 111 7 

1 0 0 0 8 

10 0 1 9 

10 10 A 

10 11 B 

110 0 C 

110 1 D 

1110 E 

1111 F 


Black 

Blue 

Green 

Cyan 

Red 

Magenta 

Brown 

White 

Black blink 
Blue blink 
Green blink 
Cyan blink 
Red blink 
Magenta blink 
Brown blink 
White blink 


0 0 0 1 1 

0 0 10 2 

0 0 11 3 

0 10 0 4 

0 10 1 5 

0 110 6 

0 111 7 

1 0 0 0 8 

10 0 1 9 

10 10 A 

10 11 B 

110 0 C 

110 1 D 

1110 E 

1111 F 


Black 

Blue 

Green 

Cyan 

Red 

Magenta 
Brown 
White 
Dark grey 
Light blue 
Light green 
Light cyan 
Light red 
Light magenta 
Yellow 
Bright white 


I Intensity bit G Green bit F Flashing bit 

R Red bit B Blue bit 

* On monochrome monitors, the blue bit is set and the red and green bits are cleared (001) for 
underline; all color bits are set (111) for normal text. 


Hexadecimal-Binary-Decimal Conversion 


Hex 

Binary 

Decimal 

Decimal 

Decimal 

Decimal 

Number 

Number 

Digit 000X 

Digit 00X0 

Digit 0X00 

Digit X000 

0 

0000 

0 

0 

0 

0 

1 

0001 

1 

16 

256 

4,096 

2 

0010 

2 

32 

512 

8,192 

3 

0011 

3 

48 

768 

12,288 

4 

0100 

4 

64 

1,024 

16,384 

5 

0101 

5 

80 

1,280 

20,480 

6 

0110 

6 

96 

1,536 

24,576 

7 

0111 

7 

112 

1,792 

28,672 

8 

1000 

8 

128 

2,048 

32,768 

9 

1001 

9 

144 

2,304 

36,864 

A 

1010 

0 

160 

2,560 

40,960 

B 

1011 

1 1 

176 

2,816 

45,056 

C 

1100 

12 

192 

3,072 

49,152 

D 

1101 

13 

208 

3,328 

53,248 

E 

1110 

14 

224 

3,584 

57,344 

F 

mi 

15 

240 

3,840 

61,440 
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